WhatsApp tightens account security with stronger two-step verification and more

WhatsApp is updating its two-step verification system to allow users to set a longer, alphanumeric password with special characters, moving away from the six-digit PIN that had previously been the only option, per TechCrunch.

The change gives users the choice to replace the existing six-digit PIN with a more complex password, adding support for letters, numbers, and special characters. According to TechCrunch, the update is part of a broader set of security improvements WhatsApp is rolling out to tighten account protection.

Two-step verification on WhatsApp adds a second layer of authentication beyond the SMS code used to register a phone number. The six-digit PIN requirement had been a longstanding limitation, and the shift to alphanumeric passwords brings WhatsApp's verification system closer in line with standard password security practices used across other platforms.

The update reflects ongoing pressure on messaging platforms to strengthen account security as SIM-swapping attacks and account takeovers remain a persistent threat. A more complex password requirement makes it harder for unauthorized parties to access an account even if they manage to intercept the registration SMS code.

TechCrunch reported the announcement on August 25, 2026, noting the two-step verification change is among multiple security enhancements WhatsApp is introducing. Further details on the full scope of the additional security features were not specified in the available source material.