WhatsApp Updates Security: PIN Replaced by Password and New Features

WhatsApp is overhauling its account security architecture by replacing traditional numerical PINs with complex passwords and expanding multi-device passkey support, according to official platform announcements rolling out since August 25.

WhatsApp Replaces Numerical PINs With Complex Passwords

For years, users relied on a six-digit numerical PIN to secure their two-step verification settings on WhatsApp. According to platform updates, this approach left accounts vulnerable to predictable combinations like “123456.” Under the new standard, the platform mandates passwords that contain at least eight characters, including a mix of letters and numbers. Special characters are permitted but remain optional.

Users who already utilize two-step verification must swap their old PIN for the new password format upon opening their account settings under the “Account” menu. WhatsApp advises users to link a valid email address to their profile to facilitate recovery if they forget their new credential.

Multi-Device Passkey Support Rolls Out Globally

Alongside the password upgrade, WhatsApp has updated its passkey integration. The platform reports that more than one billion people globally use passkeys, which allow logins via biometric authentication such as fingerprints, facial recognition, or device lock codes.

Users can now store multiple passkeys on a single account. This allows individuals operating both an Android smartphone and an Apple iPhone or iPad to secure each device independently without overwriting existing credentials. Setup is handled directly through the account settings menu.

Unknwon Caller Warnings Target Phone Fraud

To combat rising telephone scams, WhatsApp introduced an auxiliary warning feature for incoming calls from unknown numbers. When an unrecognized party contacts a user on Android devices, the app displays contextual cues indicating whether the number originates abroad or shares a mutual group membership with the recipient.

While the calling feature is currently active on Android operating systems, WhatsApp has not yet announced a release timeline for iOS devices. The broader security rollout is happening gradually across both platforms, meaning features may take several weeks to appear on all devices.

Security Context Across the Messenger Industry

The messaging sector is experiencing a broader push toward passwordless infrastructure. According to independent reports from regional outlets tracking digital security, services like Web.de and GMX recently enabled passkey logins for roughly 38 million users across Germany, Austria, and Switzerland, while Microsoft continues expanding passwortless authentication for enterprise clients.

Law enforcement actions highlight the persistent threat landscape surrounding messaging and financial platforms. Earlier investigations, including an operation coordinated by the Federal Criminal Police Office of Germany (BKA) and the FBI designated as “Operation Olympus Blade,” dismantled large-scale phishing infrastructures designed to capture communications and financial credentials.