Top News

Account security on WhatsApp is set to become more robust than ever. The Meta-owned messaging platform has introduced new features related to passkeys, two-factor authentication, and call screening. According to the company, over a billion users worldwide are already using passkeys.

The new update will particularly benefit users who access the same WhatsApp account across multiple Android or iOS devices. Such users will now be able to add multiple passkeys to their accounts.

WhatsApp rolled out passkey support for Android users in 2023, followed by a release for iOS users in 2024. Passkeys allow users to log in to their accounts using fingerprints, Face ID, or their phone's screen lock, eliminating the need to type traditional passwords.

WhatsApp users can now create distinct passkeys for the same account across different devices. For instance, a person using their WhatsApp account on both an Android phone and an iPhone can set up separate passkeys for each device.

To do this, users need to navigate to WhatsApp Settings, then Account Settings, and finally the Passkey section, where a new passkey can be created.

**Changes to Password Setup**
WhatsApp has also updated its two-factor authentication (2FA) feature. Users are no longer restricted to just a six-digit PIN; the company is now offering the option to create alphanumeric passwords. These can include a combination of letters, numbers, and special characters. A longer, more complex password can help strengthen account security.

**Smart Call Screening to Prevent Scams**
WhatsApp has also enhanced call screening for Android users. When receiving a call from an unknown number, the app will now display additional information.
Users will be able to see the caller's country of origin before answering the call. Additionally, the app will indicate whether the caller shares a common group chat with the user. WhatsApp states that this information will help users decide whether to answer or ignore unknown calls.
In cases of cyber fraud, in particular, criminals often try to elicit a reaction by creating an atmosphere of urgency and fear. Having additional context about the call will allow users to remain cautious.

Also, what is a Passkey?
A Passkey is a modern and highly secure digital key designed to eliminate the need for passwords entirely. It allows you to log in to any of your accounts (such as Google, Apple, Amazon, or banking apps) without typing a password, simply by using your phone or computer's biometric authentication (fingerprint, Face ID) or screen lock PIN.
Passkeys were developed by major global tech companies (Google, Apple, Microsoft) in collaboration with the FIDO Alliance and W3C to make the internet safer and easier to use.

How does a Passkey work?
Passkeys operate using cryptography (cryptographic key pairs) technology. When you create a passkey for a website, two keys are generated: a public key and a private key. The public key is stored on the website or app's server; since it is not a secret code, there is no risk of it being stolen. Meanwhile, the private key is securely stored on your device (phone, laptop, or password manager). It is never shared with anyone—not even the website itself.

When you log in, the website sends a 'challenge' to your device. You unlock it using your fingerprint or Face ID, which matches the two keys, allowing you to log in without entering a password.