WhatsApp has introduced changes to its security features that will benefit users. Now, even if a scammer obtains your one-time password (OTP), hacking a WhatsApp account will become significantly more difficult. WhatsApp is preparing to replace the old two-step verification system using a six-digit PIN with a more robust password system. Additionally, it will be possible to link multiple Passkeys to one account, and more information will be provided about calls from unknown numbers.
These updates arrived at a time when phishing incidents via OTP, account hacking, and social engineering on WhatsApp were causing serious problems for users. WhatsApp's parent company, Meta, announced the implementation of these new security features on August 25th. The company states that the goal of these measures is to maintain user control over their accounts and hinder the activities of scammers.
Previously, WhatsApp required users to set a six-digit PIN for two-step verification. This allowed for simple combinations, such as '123456' or a date of birth. Now, WhatsApp offers the option to create a longer password. This password can include letters, numbers, and special characters. The advantage of this approach is that even if a scammer obtains your OTP, they will have to overcome an additional layer of protection to take over the account. Simply stealing an SMS code will no longer be sufficient to hijack a WhatsApp account.
The second significant change relates to Passkey. WhatsApp reports that over a billion people have already set up Passkeys for their accounts. Users will now be able to link multiple Passkeys to a single account. This feature is particularly useful for those who use both Android and iPhone. With Passkeys, identity can be confirmed in WhatsApp via fingerprint, Face ID, or phone screen lock, reducing the need to constantly enter an OTP or PIN. To set up a Passkey, users must go to Settings > Account > Passkeys in WhatsApp.
The third change is of interest to those who frequently receive calls from unfamiliar numbers on WhatsApp. Android users will now see more contextual information when receiving a call from a number not saved in their contacts. According to WhatsApp data, the user will be able to find out if the calling number belongs to another country and whether the person has mutual groups in WhatsApp. This does not mean that every unknown call is fraud, but the user will have more data to make a decision before answering. Currently, this feature is only available to Android users.