WhatsApp Security Gets a Major Upgrade: Multiple Passkeys, Faster Login and 2 More New Features Arrive

WhatsApp is strengthening account security with a new set of features covering passkeys, two-factor authentication (2FA) and call screening. The update is particularly useful for people who use the same WhatsApp account across multiple Android and iOS devices.

According to WhatsApp, more than one billion people worldwide are already using passkeys, highlighting the growing adoption of passwordless authentication.

WhatsApp Now Lets You Add Multiple Passkeys

One of the biggest changes is the ability to create multiple passkeys for a single WhatsApp account.

Previously, passkey support allowed users to secure their account using biometric authentication or their device's screen lock. With the new option, users who access WhatsApp on multiple devices can create a separate passkey for each device.

For example, someone using the same account on an Android smartphone and an iPhone can set up individual passkeys for both devices.

To create a passkey, users can go to:

WhatsApp → Settings → Account → Passkeys → Create a passkey

Passkeys can use a fingerprint, Face ID or the device's screen-lock authentication instead of requiring users to enter a traditional password.

WhatsApp Makes 2FA Passwords More Flexible

WhatsApp is also updating its two-factor authentication system.

Users will no longer be limited to a six-digit PIN. The platform is introducing alphanumeric passwords, allowing users to combine letters, numbers and special characters.

Using a longer and more complex password can provide an additional layer of protection for a WhatsApp account.

Smart Call Screening Helps Identify Unknown Callers

WhatsApp is also improving call screening for Android users.

When an unknown number calls, the app can provide additional context, including the caller's country and whether the caller shares a common group with the recipient.

This information can help users decide whether an unfamiliar call is worth answering.

The feature could be particularly useful in reducing the risk of social-engineering scams, where fraudsters attempt to create urgency or fear to persuade victims to reveal sensitive information or take an unsafe action.

What Is a Passkey?

A passkey is a passwordless authentication method that lets users sign in using their device's biometric authentication or screen lock.

Instead of remembering a password, users verify their identity through a fingerprint, Face ID or another supported device-unlock method.

Passkeys are based on public-key cryptography. A public key is associated with the service, while the corresponding private key remains protected on the user's device or credential manager.

Why Are Passkeys Considered More Secure?

Passkeys offer several advantages over traditional passwords:

Protection against password guessing: There is no conventional password for attackers to guess.

Strong phishing resistance: Passkeys are designed to work with the legitimate service they were created for.

Convenient device recovery: Depending on the platform and credential manager, passkeys can be securely synced and restored across compatible devices.

Simpler authentication: Users can authenticate with biometrics or a device screen lock rather than repeatedly entering passwords or OTPs.

However, passkeys do not mean that users should ignore other security measures. Keeping devices updated, protecting the device itself and being cautious with suspicious messages and calls remain important.

WhatsApp Security Update: What's New?

WhatsApp's latest security improvements focus on three key areas: multiple passkeys for one account, stronger 2FA password options and smarter screening of calls from unknown numbers.

For users with WhatsApp installed across multiple devices, the multiple-passkey option is likely to be the most significant change, while enhanced call screening could provide useful additional context when dealing with unfamiliar callers.