WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android
Summary: Meta announced on Tuesday that WhatsApp now supports multiple passkeys per account on both iOS and Android, and said more than 1 billion people already use a passkey to log into WhatsApp. Passkeys arrived on Android in October 2023 and iOS in early 2024, and WhatsApp is also upgrading two-step verification from a six-digit PIN to a full alphanumeric password while adding caller context on Android such as call origin and shared group membership.
Why it matters: WhatsApp frames two-step verification as the layer that protects an account even when someone has the one-time passcode, and it is replacing a six-digit PIN with a longer alphanumeric password precisely because short codes are easy to guess. With over a billion accounts already on passkeys, the remaining exposure sits with users still on weak PINs and with anyone answering calls from unknown numbers without the new context.
Read the original at The Hacker News ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026