WhatsApp Enhances Login Security with Multiple Passkey Support
Phishing-resistant sign-in method now available for both iOS and Android users.
1Expanding Passkey Support
Meta announced multiple passkey support for WhatsApp. Users can now add several passkeys to a single account. This feature enables phishing-resistant login on both iOS and Android devices. Passkey usage on WhatsApp has surpassed 1 billion people. Initially launched on Android in October 2023, the feature expanded to iOS in early 2024.
2Strengthened Security Layers
WhatsApp upgraded its two-step verification system. The platform previously used 6-digit PINs but now offers full password options. Users can create longer alphanumeric passwords with special characters (like @). Those using simple passwords like '123456' are urged to update immediately. The new system makes account takeovers significantly more difficult.
3Improved Call Safety Features
Android users will receive additional context for incoming calls. The update shows call origins, whether the caller is in contacts, and shared group memberships. WhatsApp reminds users that scammers rely on urgency and encourages caution with unknown calls. This feature provides more information before answering suspicious calls.
4Meta's Security Strategy
Passkey support debuted on WhatsApp before expanding to Facebook logins in June 2025. This move aligns with Meta's effort to standardize authentication systems. As biometric login methods gain traction, passkeys are replacing traditional passwords. The company aims to enhance security without compromising user experience across its platforms.
5Industry Developments
Passkey technology has been adopted by Apple, Google, and Microsoft. Based on FIDO Alliance standards, this system eliminates password memorization. By 2025, most major tech companies offer passkey support. WhatsApp's update seeks to raise security standards in mobile communication, following broader industry trends toward passwordless authentication.
6Steps for Users
Users can add passkeys via Settings > Account > Passkeys. The new two-step verification passwords are configured in the same section. While WhatsApp delivers security updates automatically, users must enable these features. Those using password managers should update their existing credentials to maximize protection.
7Countering Security Threats
Over 80% of cyber attacks exploit weak passwords. Passkeys substantially reduce this risk. WhatsApp data shows accounts without two-step verification are 10 times more likely to be compromised. Users on public Wi-Fi networks should implement these updates immediately, as they're particularly vulnerable to credential theft.
8New Era in Digital Security
WhatsApp's updates redefine mobile communication security standards. The combination of passkeys and advanced two-step verification protects accounts against common cyber threats. Similar security measures are expected to roll out across Meta's platforms. These developments herald a new chapter in digital identity management, moving the industry toward passwordless authentication.
Original article: The Hacker News — WhatsApp Çoklu Passkey Desteğiyle Giriş Güvenliğini Artırıyor