WhatsApp Rolls Out Multiple Passkeys and Stronger Two-Step Verification to Thwart Phishing

Meta has announced new WhatsApp account security features, including support for multiple passkeys per account on both iOS and Android, enhancing phishing-resistant sign-ins. The company reports that over 1 billion people now use passkeys to log into WhatsApp. Passkey support was first introduced on Android in October 2023, expanded to iOS in early 2024, and integrated into Facebook logins in June 2025. Users can manage passkeys via Settings > Account > Passkeys.

Additionally, WhatsApp is upgrading its two-step verification from a six-digit PIN to a full password, allowing longer alphanumeric strings with special characters. This change adds an extra layer of protection against account takeover, even if a one-time passcode is compromised. The company also announced that Android users will see more context on calls from unknown numbers, including call origin, contact status, and common groups, helping users identify potential scams.

These updates reflect WhatsApp’s ongoing commitment to improving account security and reducing phishing and social engineering risks.