Skip to main content

WhatsApp two-step verification codes are ditching six-digit PINs for full passwords

WhatsApp is making some security upgrades, including turning two-step verification codes into full passwords instead of the traditional six-digit numerical PIN.

Alongside celebrating that one billion of its users are now using passkeys, WhatsApp has two new account security features rolling out.

The first is an upgrade to two-step verification codes used with WhatsApp.

No longer are these codes just a six-digit numerical PIN, but a full password. WhatsApp says these will be “longer, alphanumeric,” and include special characters (@,$, etc) to make the password harder to guess. w

Advertisement - scroll for more content

Two-step verification is getting stronger: Two-step verification is an extra protection layer that helps prevent someone from taking over your account, even if they get hold of your one-time passcode. Until now it was a six-digit PIN, we’ve now upgraded it to a full password: longer, alphanumeric, and even with special ch@racters to make it harder to guess. If you’ve been using “123456,” this is your sign to upgrade.

On Android, WhatsApp is also rolling out a new screen for calls that are coming from unknown callers, with the incoming call screen now showing context such as country of origin and whether or not the number is in any of the groups you’re in.

More on WhatsApp:

Follow Ben: Twitter/XThreads, Bluesky, and Instagram

FTC: We use income earning auto affiliate links. More.

You’re reading 9to5Google — experts who break news about Google and its surrounding ecosystem, day after day. Be sure to check out our homepage for all the latest news, and follow 9to5Google on Twitter, Facebook, and LinkedIn to stay in the loop. Don’t know where to start? Check out our exclusive stories, reviews, how-tos, and subscribe to our YouTube channel

Comments

Author

Avatar for Ben Schoon Ben Schoon

Ben is a Senior Editor for 9to5Google.

Find him on Twitter @NexusBen. Send tips to schoon@9to5g.com or encrypted to benschoon@protonmail.com.