WhatsApp is rolling out some of its most meaningful security upgrades in years, giving users stronger tools to protect their accounts without making everyday use more complicated. The changes, announced in late August 2026, touch three key areas: two-step verification, caller context for unknown numbers, and multi-device passkeys.

A better lock on your account

For a long time, WhatsApp’s two-step verification relied on a simple six-digit PIN. It was better than nothing, but let’s be honest: codes like 123456 or 111111 weren’t exactly fortress-level security.

Now, WhatsApp is replacing that numeric-only PIN with a full alphanumeric password. Users can mix letters, numbers, and even special characters to create something far harder to guess or brute-force. The new password must be at least eight characters long and include at least one letter and one number, giving people much more flexibility to craft a strong credential.

This isn’t just a cosmetic change. Two-step verification is designed as an extra layer of protection that kicks in even if someone manages to intercept your one-time SMS or email code. With a stronger password in place, the barrier to hijacking an account goes up significantly.

WhatsApp says users who still rely on weak PINs will be prompted to switch to the new format, nudging everyone toward better security without forcing a complicated setup process.

Knowing who’s calling before you answer

If you’ve ever hesitated before picking up a call from an unknown number, you’re not alone. Scammers and spammers have made unsolicited calls a daily nuisance for millions of people.

On Android, WhatsApp is now adding more context to calls from numbers not in your contacts. Before you answer, the app may show details like the caller’s country code and whether you share any WhatsApp groups with them. That extra bit of information can be the difference between answering a legitimate call from a new business contact and ignoring a potential scam.

This feature builds on earlier privacy tools like “Silence Unknown Callers,” which quietly filtered suspicious calls without ringing your phone. The new caller context doesn’t silence calls; instead, it arms you with information so you can decide confidently whether to pick up.

Passkeys go mainstream—and multiply

Perhaps the biggest milestone in this update is how normal passkeys have become. WhatsApp says more than one billion people now use a passkey to log back into their account. A passkey lets you authenticate with your fingerprint, face scan, or device screen-lock code—no codes, no PINs, no memorized passwords.

Passkeys are widely considered more secure than traditional passwords because they’re tied to your device and resistant to phishing. Even if someone tricks you into visiting a fake login page, they can’t steal your passkey the way they could a password.

Until now, you could only have one passkey per WhatsApp account. That worked fine if you lived entirely in the Android world or the Apple ecosystem, but it created friction for people who switch between iPhone and Android. The new update lets you add multiple passkeys to a single account, so you can use biometric sign-in on both platforms without hassle.

Setting it up is straightforward: go to Settings > Account > Passkeys and follow the prompts. From there, WhatsApp will use your device’s built-in biometric or screen-lock system to verify it’s really you.

Why these changes matter now

These updates land at a time when messaging apps are under constant pressure to balance convenience with security. Phishing attacks, SIM-swapping scams, and social engineering tricks have only grown more sophisticated, and WhatsApp’s two billion-plus user base makes it a prime target.

By strengthening two-step verification, adding caller context, and expanding passkey support, WhatsApp is addressing some of the most common attack vectors: weak credentials, unknown callers, and single-device authentication limits.

The company is also making these features accessible rather than intimidating. There’s no complex dashboard or security jargon—just clearer passwords, more call info, and the option to use your face or fingerprint on multiple devices.

How to get started

If you want to tighten your WhatsApp security today, here’s what to do:

• Upgrade your two-step verification to an alphanumeric password in Settings > Account > Two-step verification.
• Add or update your passkeys in Settings > Account > Passkeys, especially if you use both Android and iOS.
• On Android, pay attention to the extra caller details that appear for unknown numbers before answering.

Taken together, these changes make WhatsApp accounts harder to compromise and everyday interactions a bit safer—without turning the app into a security course you need to study for.