WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update

WhatsApp announced several account security enhancements: users can now add multiple passkeys to facilitate login across devices; the two-step verification mechanism has been upgraded from a six-digit PIN to a full password supporting alphanumeric and special characters; and Android users receive additional caller context information for calls from non-contacts, including caller country and shared WhatsApp groups. These features are designed to strengthen authentication and provide users with more information to avoid scams. The update follows the recent introduction of an AI-powered Scam Alert feature. No vulnerabilities or exploits are described in this update.

The impact of these changes is an improved security posture for WhatsApp users by enabling stronger authentication methods and enhanced caller identification to reduce scam risks. There is no indication of a security vulnerability or exploit associated with these features. Instead, these updates aim to mitigate risks related to account compromise and social engineering attacks.

These security improvements are implemented by WhatsApp and do not require user action beyond adopting the new features if desired. Users are encouraged to enable multiple passkeys and update their two-step verification password to benefit from stronger authentication. Android users can use the enhanced caller information to make informed decisions about answering calls from unknown numbers. No known vulnerabilities or exploits require patching or emergency mitigation.