WhatsApp is reportedly working on a significant change to its account security system, potentially replacing the current two-step verification PIN with a full password. According to a recent report by India TV News, the Meta-owned messaging platform is testing this feature to provide users with stronger protection against unauthorized access.
How the New System Would Work
The existing two-step verification requires a six-digit PIN that users must enter periodically to verify their identity. The proposed password system would allow users to set a more complex and personalized password, making it harder for attackers to compromise accounts. The password would be required when registering a phone number with WhatsApp again or when verifying identity on a new device.
A source familiar with the development stated, "The goal is to give users an extra layer of security that is both familiar and robust. Passwords can include a mix of characters, making them much stronger than a simple numeric PIN." However, WhatsApp has not officially confirmed the rollout timeline.
Potential Impact on Users
If implemented, this change could affect over 2 billion WhatsApp users worldwide. The transition from PIN to password may require users to update their security settings manually. Early indications suggest that the feature could be optional, allowing users to stick with the PIN if they prefer.
Cybersecurity experts have welcomed the move, noting that numeric PINs are often vulnerable to brute-force attacks. "A password with sufficient length and complexity can significantly reduce the risk of account takeover," said Dr. Ananya Sharma, a cybersecurity analyst. "However, WhatsApp must ensure that password recovery mechanisms are secure and user-friendly."
Comparison with Other Platforms
Many other messaging apps, such as Telegram and Signal, already offer password-based two-step verification. WhatsApp's move would align it with industry standards while maintaining its emphasis on end-to-end encryption. The company has also been exploring passkeys and biometric authentication to complement password security.
What Users Should Do Now
Until the feature rolls out, users are advised to enable the existing two-step verification PIN and use a strong, unique PIN not used elsewhere. WhatsApp also recommends linking an email address to facilitate account recovery if the PIN is forgotten. The new password feature is expected to undergo beta testing in select regions before a global launch.
