WhatsApp changes account security with strong password option

WhatsApp is giving users more ways to protect their accounts as scams and social-engineering attacks targeting messaging-app users become increasingly common.

Under an upcoming security update, users will be able to replace the existing six-digit two-step verification PIN with a longer password combining letters, numbers and special characters.

The change gives users a more flexible second layer of protection after the phone-number verification process. A longer and more complex password also provides substantially more possible combinations than a six-digit PIN, making it harder to guess.

WhatsApp is also broadening its passkey support, allowing users to use device-based authentication where the feature is available.

For Android users, the messaging platform is additionally introducing more information about calls from unknown numbers before they decide whether to answer.

The security measures are being introduced as attackers increasingly rely on phishing and social engineering to persuade users to surrender verification codes or other account information, rather than attempting to break WhatsApp’s message encryption.

With more than three billion users globally, even relatively minor changes to account security could affect a vast number of people.