Particle.news

WhatsApp Adds Multiple Passkeys and Stronger Password-Based Two‑Step Verification

The company says the changes make sign‑ins and encrypted backups harder for phishers and account hijackers to steal.

Overview

  • WhatsApp announced the changes on Tuesday, August 25, 2026, and has begun a gradual rollout that will appear to users on iOS and Android as the app updates.
  • The app now allows more than one passkey per account so people who use both Android and iOS can sign in with device‑based, phishing‑resistant credentials.
  • Two‑step verification has been upgraded from a six‑digit PIN to a full password that can be longer, alphanumeric and include special characters to make guesses harder.
  • On Android, incoming calls from non‑contacts will show extra context such as the caller’s country and shared WhatsApp groups so users can spot likely scam calls.
  • WhatsApp says more than 1 billion people already use passkeys and notes the new features also let passkeys protect end‑to‑end encrypted backups, reducing reliance on long recovery codes while the company continues a string of 2026 anti‑scam updates.