WhatsApp Introduces New Security Measures to Protect User Accounts
Meta announces two key security features to prevent account hacking on its messaging platform.
1Enhanced Security on WhatsApp
WhatsApp has rolled out two major updates to bolster account security. Users can now create passwords with letters, numbers, and special characters instead of 6-digit PINs. Additionally, multiple passkeys (fingerprint, facial recognition) are now supported across Android and iOS devices. These measures aim to reduce account takeover risks for the platform's over 2 billion active users. The changes come as part of WhatsApp's ongoing security improvements following increasing phishing attempts globally.
2Expanded Passkey Support
WhatsApp now allows users to employ different biometric methods for the same account across devices. For instance, Face ID on iPhone and fingerprint on Android tablets can be used simultaneously. Passkeys can be added via Settings > Account > Passkeys. This feature particularly enhances security for multi-device users. The update replaces the 6-digit PIN system in place since 2017, though the older method remains optional for those who prefer it.
3Caller Context Features
The app will display additional information for calls from unknown numbers not in contacts. Android users can see if the caller is from another country and check for mutual chat groups. Cybersecurity expert Joseph Steinberg notes this feature will effectively combat spoofing attempts. This follows June's update introducing username creation and number hiding options. The contextual caller ID aims to reduce social engineering attacks that have plagued messaging platforms.
4Password Requirements
The new password feature requires minimum 8 characters with at least one letter and one number. Users can maintain their old PINs or create passwords via Settings > Account > Password. This functions as part of WhatsApp's optional two-step verification - combining SMS codes (first step) with passwords/PINs (second step). All credentials are encrypted and stored locally on devices. The update gives users more control over their authentication methods while maintaining ease of access.
5Security Expert Insights
Columbia University's Joseph Steinberg praises the updates for enhancing security without compromising usability. He notes the features will particularly prevent 'group spoofing' scams where fraudsters claim shared connections. While the motivation behind these changes isn't confirmed (possibly proactive rather than breach-related), Steinberg emphasizes their importance. FTC estimates $425 million was lost to WhatsApp scams in 2023 in the US alone. The updates position WhatsApp as more security-conscious amid growing messaging app competition.
6Account Takeover Realities
Keepnet Labs data shows most WhatsApp account compromises occur through social engineering rather than PIN/SMS theft. While Meta doesn't share exact hack statistics, the platform remains a prime target for scammers. The new measures specifically address social engineering vulnerabilities. Experts recommend users enable all available security features and regularly update credentials. The password option provides stronger protection against brute force attacks compared to numeric PINs.
7Messaging Market Context
Founded in 2009, WhatsApp dominates global messaging with over 2 billion users, followed by Facebook Messenger, Snapchat, and Telegram. Meta's security investment reflects its strategy to differentiate through trust in the competitive messaging space. Particularly popular in Europe and Asia, WhatsApp is increasingly used for business communications. These updates come as regulators worldwide pressure tech firms to enhance user protections, especially concerning financial scams proliferating on messaging platforms.
8User Security Recommendations
Cybersecurity experts urge WhatsApp users to immediately enable these new features. Those using multiple devices should particularly benefit from diversified passkeys. Verifying caller context information and mutual connections can significantly reduce spoofing risks. When combined with existing tools like Scam Alerts, these updates create multiple security layers. Regular password updates and cautious sharing of verification codes remain critical, as human error continues to be the weakest link in account security chains.
Original article: CNET — WhatsApp Hesapları İçin Yeni Güvenlik Önlemleri