Use this image only if you have the right to publish it or it is licensed for your use.

WhatsApp says more than one billion people now use a passkey to protect their accounts. The company is pairing that milestone with changes to two-step verification and new caller information for Android users, all aimed at making it easier to spot risk before an account or call becomes a problem.

The updates do not remove the need for basic caution. They do, however, give users more options than a single one-time code or a short numeric PIN.

What a WhatsApp passkey does

A passkey lets a person log back into WhatsApp using a phone’s fingerprint, face recognition or screen-lock code. According to WhatsApp, the method avoids relying on a texted verification code or a separate PIN each time someone needs to verify that the account belongs to them.

WhatsApp also says users can now add more than one passkey to the same account if they use both Android and iOS devices. That matters for people who switch phones, use a work device alongside a personal one or move between platforms.

To check the setting, open WhatsApp and go to Settings > Account > Passkeys. Availability can depend on the device and the app version in use.

Two-step verification is moving beyond a six-digit PIN

WhatsApp’s two-step verification feature is being upgraded from a six-digit PIN to a longer password that can include letters, numbers and special characters. The company says the change is intended to make the extra layer of protection harder to guess.

A passkey and two-step verification are not the same thing. A passkey helps confirm access through the device. Two-step verification adds a separate account-protection layer, which can be especially useful if someone obtains a one-time verification code.

More context before answering an unknown call

WhatsApp is also adding more information for Android users when a call comes from a number that is not saved in their contacts. The company says the screen can show details such as whether the number is from another country and whether the caller is connected through a group the user shares.

That information is not a guarantee that a caller is trustworthy. It is simply another prompt to pause before answering. If a call is unexpected, users should avoid sharing verification codes, passwords or financial details, regardless of what the caller claims.

A practical security checklist

• Set up a passkey on every device you use regularly.
• Use a unique, memorable two-step verification password rather than a simple sequence.
• Review unknown callers before answering, especially if the number is unfamiliar or international.
• Never give a WhatsApp verification code or account password to another person.

The most important part of the announcement is not the headline number. It is the shift toward several layers of protection: a device-based sign-in option, a stronger account password and more context around calls from unknown numbers. Used together, those tools can make it harder for a bad actor to take over an account.

Source

• WhatsApp Blog — One billion people are now protected with passkeys on WhatsApp

Last checked: August 25, 2026. Feature availability can vary by device, operating system and app version. For a correction or source question, contact contact.globalledger@gmail.com.