WhatsApp Tightens Account Security With New Safety Features: What Are They and How Do They Work?

WhatsApp is strengthening account security with a new set of features aimed at protecting users from account takeovers, phishing attempts and increasingly sophisticated online scams. The Meta-owned messaging platform is upgrading its two-step verification system, expanding passkey support and providing users with more information when they receive calls from unknown numbers. The company says the measures are designed to add stronger protection while keeping the process simple for everyday users.

One of the biggest changes is the upgrade to two-step verification. WhatsApp users will be able to use a longer password containing letters, numbers and special characters instead of relying only on the traditional six-digit PIN. The additional layer is intended to make it harder for attackers to access an account even if they manage to obtain its verification code.

WhatsApp is also expanding its passkey feature. Users can now add multiple passkeys to their WhatsApp account, allowing authentication through security methods already built into their devices, such as a fingerprint, Face ID or screen lock. Passkeys can reduce dependence on passwords and verification codes and are designed to offer stronger resistance against phishing.

Another new measure focuses on calls from unknown numbers. On Android, WhatsApp is providing additional context about unfamiliar callers, including information such as whether the number is registered in another country and whether the caller shares any WhatsApp groups with the recipient. The feature is intended to help users make a more informed decision about answering an unexpected call.

The security updates come at a time when scammers are increasingly using social engineering to target WhatsApp users. Instead of directly breaking into an account, criminals often try to persuade victims to share verification codes, scan QR codes or approve suspicious device-linking requests. WhatsApp has also been introducing warnings for potentially suspicious device-linking attempts. Such warnings can alert users when a request to connect their account to another device appears unusual, helping prevent scammers from secretly gaining access.

The company is further testing Scam Alerts, a feature designed to identify possible scam patterns in conversations involving people who are not saved in a user's contacts. The detection is designed to take place on the device, with users receiving a warning when a conversation appears suspicious.

For WhatsApp users, the latest changes highlight the importance of using the platform's built-in security controls. Enabling two-step verification, setting up a passkey, regularly checking linked devices and refusing to share verification codes can significantly reduce the chances of an account being compromised. The new features do not mean that scams will disappear completely. However, by combining stronger authentication with warnings and additional information about suspicious activity, WhatsApp is giving users more tools to identify potential threats before they become a bigger problem.