WhatsApp Tightens Account Protections With Stronger Two-Step Verification

WhatsApp is introducing tougher account safeguards — longer, more complex secondary passcodes, improved recovery options and tighter controls over linked devices — in a phased rollout that begins this month.

The company said the changes are designed to reduce account takeovers and give users clearer ways to regain access. Starting with the next app update, WhatsApp will let people create alphanumeric secondary passcodes of greater length instead of the shorter numeric codes used now. The update also adds an optional recovery email and a new prompt that asks users to re-enter their passcode after major device changes or prolonged inactivity.

Beyond the passcode overhaul, WhatsApp is expanding tools that manage where an account is signed in. Linked sessions on computers and tablets will time out automatically after a set stretch of inactivity, and the app will send more immediate alerts when a registration is attempted from a new phone. The company is also introducing a toggle that forces a passcode check before restoring chat archives, aiming to make backups harder to hijack.

Security specialists welcomed the steps but warned they could create headaches for some users. A researcher at a cybersecurity lab said stronger credentials will stop simple attacks, noting that roughly one in three account compromises stem from weak secondary authentication. But the expert added that people who don’t set a recovery email could be locked out longer, so WhatsApp will need robust support to help those users recover access without increasing fraud risk.

The changes mirror a wider push by messaging platforms to nudge users toward more resilient account defenses while balancing convenience. WhatsApp plans a staggered launch, with early access for users on the latest releases and broader availability over the coming weeks. The company recommends enabling the new passcode, adding a recovery email and turning on device notifications to reduce the risk of unauthorized access.

For now, users should check Settings → Account → Two-Step Verification after updating the app to review the new options. WhatsApp’s support pages will publish step-by-step guidance, and customer service channels will field recovery requests as the new system becomes widespread.