WhatsApp has expanded account protection with multiple passkeys, stronger two-step verification and additional context for calls from unknown numbers.
The WhatsApp security update introduces a new set of account protection features as the messaging platform continues to strengthen safeguards against account takeovers and scam calls. WhatsApp says more than one billion people have now enabled passkeys, marking a major milestone for the passwordless login technology.
The latest WhatsApp security update also allows users who access the same account across Android and iOS devices to add more than one passkey. Alongside this, WhatsApp is upgrading two-step verification from a six-digit PIN to a more flexible password and adding additional information about unknown callers on Android.
WhatsApp Security Update Crosses One Billion Passkeys
The WhatsApp security update comes with a significant passkey adoption milestone. WhatsApp says more than one billion users have already configured a passkey for their accounts.
Passkeys provide an alternative to traditional login codes by allowing users to authenticate using the security mechanism already available on their smartphone. Depending on the device, this can include a fingerprint, facial recognition or the device’s screen-lock credential.
WhatsApp originally introduced passkey support on Android in 2023 and subsequently expanded it to iOS. The company has also extended passkey technology to encrypted chat backups, allowing users to use their device authentication methods rather than remembering a separate password or lengthy encryption key.
WhatsApp Security Update Allows Multiple Passkeys
One of the practical changes in the WhatsApp security update is the ability to associate more than one passkey with an account when the user operates across Android and iOS devices.
Previously, users who maintained WhatsApp access across different platforms could face additional complexity when managing authentication. The new approach allows separate passkeys to be associated with the same WhatsApp account.
Users can access the feature through Settings > Account > Passkeys, according to WhatsApp.
This could be particularly useful for people who use an Android smartphone as their primary device but also maintain an iPhone, or vice versa. Instead of depending on a single authentication credential, each supported device can have its own passkey.
WhatsApp 2FA Gets Stronger With Full Passwords
The WhatsApp security update also changes how two-step verification works.
WhatsApp’s two-step verification has traditionally relied on a six-digit PIN. The company is now upgrading the system to support a full password containing letters, numbers and special characters.
This gives users more flexibility to create a stronger authentication credential. A longer password with a mixture of characters can provide a larger number of possible combinations than a short numeric PIN, although the actual security still depends on how carefully the password is chosen and protected.
Two-step verification remains particularly important because it provides an additional barrier against account takeover attempts. WhatsApp explains that the feature can help protect an account even if someone obtains the user’s one-time registration code.
WhatsApp Call Screening Adds More Information
The WhatsApp security update also introduces a useful change for Android users receiving calls from people who are not saved in their contacts.
Instead of seeing only limited information about an unknown caller, users can now receive additional context. WhatsApp says this can include whether the number originates from another country and whether the caller shares a group with the recipient.
The additional information is designed to give users more time to evaluate an incoming call before answering it.
This is especially relevant because scam calls frequently attempt to create a sense of urgency. Providing context about an unfamiliar number can help users make a more informed decision instead of immediately responding to an unexpected call.
WhatsApp Security Update Targets Scam Risks
The WhatsApp security update arrives as online scams increasingly use messaging and calling platforms to approach potential victims.
WhatsApp has previously introduced features such as Silence Unknown Callers, which prevents calls from unknown numbers from ringing while still recording them in the call list. The company has also added Privacy Checkup to help users review important privacy settings.
The latest caller-context feature takes a different approach. Rather than simply suppressing an unknown call, WhatsApp provides additional information that users can consider before deciding whether to answer.
This is potentially useful for legitimate calls as well. For example, an unsaved number from another country or someone who belongs to a common group may be easier to identify with the additional context.
Why Passkeys Matter for WhatsApp Users
The growing adoption of passkeys is significant because they reduce reliance on traditional authentication codes and passwords.
A passkey uses cryptographic credentials associated with a user’s device and is unlocked using the device’s existing authentication method. In practical terms, a user can verify their identity with a fingerprint, face recognition or screen lock rather than manually entering a password.
For users, this can make account access more convenient while also reducing some risks associated with passwords and authentication codes.
WhatsApp’s milestone of more than one billion passkey users indicates that passwordless authentication is becoming increasingly mainstream on a major messaging platform.
Multiple Security Layers Are More Important Than Ever
The WhatsApp security update demonstrates that account security is no longer dependent on a single feature.
Passkeys protect the authentication process, two-step verification adds another layer against account takeover, while caller information helps users make safer decisions when dealing with unknown numbers.
These features address different stages of the security chain.
A passkey primarily helps establish that the person accessing the account is the legitimate user. Two-step verification provides another barrier against unauthorised account registration. Meanwhile, caller context addresses a different threat: social engineering through unexpected calls.
WhatsApp Security Update Could Be Useful in India
The WhatsApp security update is particularly relevant to Indian users because WhatsApp is deeply embedded in everyday communication across the country.
Users frequently receive calls from numbers that are not saved in their contacts, including delivery agents, businesses, service providers and other legitimate callers. At the same time, unknown numbers are also commonly used for unwanted calls and scam attempts.
The new caller information could therefore help users distinguish between potentially relevant calls and suspicious ones.
However, users should not treat the new information as proof that a caller is trustworthy. A common group or a domestic number does not automatically establish that the caller is legitimate.
Users should continue to avoid sharing OTPs, banking credentials, passwords or other sensitive information during unexpected WhatsApp calls.
WhatsApp Security Update Builds on Existing Protections
The WhatsApp security update is part of a broader effort by the company to add multiple layers of protection around accounts and conversations.
WhatsApp messages and calls are protected by end-to-end encryption by default, while the platform has gradually introduced additional features such as two-step verification, encrypted backups, Chat Lock and controls for unknown callers.
In 2025, WhatsApp also introduced passkey-based encryption for chat backups, allowing users to protect backups using their fingerprint, facial authentication or screen-lock code.
The latest changes therefore extend an existing security strategy rather than replacing WhatsApp’s core encryption model.
What WhatsApp Users Should Do
Users who want to take advantage of the WhatsApp security update should review their account security settings after updating the application.
If passkeys are supported on the device, users can check Settings > Account > Passkeys to configure their authentication options. WhatsApp also recommends using stronger two-step verification credentials rather than relying on easily guessed passwords.
For Android users, the additional caller information should appear when receiving calls from people who are not saved in their contacts, subject to feature availability.
Users should also keep WhatsApp updated to the latest version to ensure that newly introduced security capabilities are available when supported on their device.
WhatsApp Security Update: What It Means for Users
The WhatsApp security update is notable because it addresses both technical and human aspects of online security.
Passkeys make account authentication easier and potentially more resistant to common credential-based attacks. Stronger two-step verification gives users another layer of protection against account takeover, while caller context attempts to reduce the effectiveness of scam tactics based on urgency.
The combination is more useful than any single feature operating independently.
For everyday users, the most important step remains basic security hygiene: enable two-step verification, use a strong password, protect the phone itself and never share WhatsApp registration codes or sensitive financial information with an unknown caller.
Final Verdict
The WhatsApp security update brings three important changes: support for multiple passkeys on accounts used across Android and iOS, stronger password-based two-step verification and additional context for unknown callers on Android.
WhatsApp says its passkey system has now crossed one billion users, highlighting the growing adoption of passwordless authentication.
The new caller information could also prove useful against social-engineering attempts by giving users more context before they answer an unfamiliar number. However, it should be treated as an aid rather than a guarantee that a caller is genuine.
Overall, the WhatsApp security update strengthens the platform’s layered approach to account protection and privacy, giving users more control over how they authenticate their accounts and respond to potentially suspicious communications.
