# WhatsApp Introduces New Security Measures to Protect User Accounts Meta announces two key security features to prevent account hacking on its messaging platform. - **Source:** [CNET](https://brifing.si/source/ce507de7-7f24-4ff4-ab6d-7635abcc095a) - **Published:** 2026-08-25 - **Original article:** - **On Brifing:** https://brifing.si/s/c05390c9-b948-48a1-8a31-5d1b0902d6b8 ## Enhanced Security on WhatsApp WhatsApp has rolled out two major updates to bolster account security. Users can now create passwords with letters, numbers, and special characters instead of 6-digit PINs. Additionally, multiple passkeys (fingerprint, facial recognition) are now supported across Android and iOS devices. These measures aim to reduce account takeover risks for the platform's over 2 billion active users. The changes come as part of WhatsApp's ongoing security improvements following increasing phishing attempts globally. ## Expanded Passkey Support WhatsApp now allows users to employ different biometric methods for the same account across devices. For instance, Face ID on iPhone and fingerprint on Android tablets can be used simultaneously. Passkeys can be added via Settings > Account > Passkeys. This feature particularly enhances security for multi-device users. The update replaces the 6-digit PIN system in place since 2017, though the older method remains optional for those who prefer it. ## Caller Context Features The app will display additional information for calls from unknown numbers not in contacts. Android users can see if the caller is from another country and check for mutual chat groups. Cybersecurity expert Joseph Steinberg notes this feature will effectively combat spoofing attempts. This follows June's update introducing username creation and number hiding options. The contextual caller ID aims to reduce social engineering attacks that have plagued messaging platforms. ## Password Requirements The new password feature requires minimum 8 characters with at least one letter and one number. Users can maintain their old PINs or create passwords via Settings > Account > Password. This functions as part of WhatsApp's optional two-step verification - combining SMS codes (first step) with passwords/PINs (second step). All credentials are encrypted and stored locally on devices. The update gives users more control over their authentication methods while maintaining ease of access. ## Security Expert Insights Columbia University's Joseph Steinberg praises the updates for enhancing security without compromising usability. He notes the features will particularly prevent 'group spoofing' scams where fraudsters claim shared connections. While the motivation behind these changes isn't confirmed (possibly proactive rather than breach-related), Steinberg emphasizes their importance. FTC estimates $425 million was lost to WhatsApp scams in 2023 in the US alone. The updates position WhatsApp as more security-conscious amid growing messaging app competition. ## Account Takeover Realities Keepnet Labs data shows most WhatsApp account compromises occur through social engineering rather than PIN/SMS theft. While Meta doesn't share exact hack statistics, the platform remains a prime target for scammers. The new measures specifically address social engineering vulnerabilities. Experts recommend users enable all available security features and regularly update credentials. The password option provides stronger protection against brute force attacks compared to numeric PINs. ## Messaging Market Context Founded in 2009, WhatsApp dominates global messaging with over 2 billion users, followed by Facebook Messenger, Snapchat, and Telegram. Meta's security investment reflects its strategy to differentiate through trust in the competitive messaging space. Particularly popular in Europe and Asia, WhatsApp is increasingly used for business communications. These updates come as regulators worldwide pressure tech firms to enhance user protections, especially concerning financial scams proliferating on messaging platforms. ## User Security Recommendations Cybersecurity experts urge WhatsApp users to immediately enable these new features. Those using multiple devices should particularly benefit from diversified passkeys. Verifying caller context information and mutual connections can significantly reduce spoofing risks. When combined with existing tools like Scam Alerts, these updates create multiple security layers. Regular password updates and cautious sharing of verification codes remain critical, as human error continues to be the weakest link in account security chains. ## Sources covering this story - https://www.cnet.com/tech/services-and-software/whatsapp-adds-security-measures-to-help-prevent-accounts-from-being-hacked/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._