WhatsApp Enhances Security with an Extra Protection Layer via Account Passwords
WhatsApp Enhances Security with an Extra Protection Layer via Account Passwords
WhatsApp, owned by Meta, is testing a new security feature aimed at raising the level of protection for user accounts on iPhone and Android devices, by adding a password dedicated to the account.
The upcoming feature will add a second verification layer after entering the traditional 6-digit activation code when registering a phone number. As a result, even if an unauthorized person manages to obtain the verification code — through methods such as SIM Swap — they will not be able to access the account without entering the additional password pre-set by the user.
How Will the Feature Work?
-
The user can set a password from within the app settings.
-
Its length must be between 6 and 20 characters and numbers.
-
It must contain at least one letter and one number.
-
The app will display an indicator showing the strength of the chosen password.
This feature will be entirely optional, giving the user the freedom to activate, modify, or delete it at any time, while maintaining flexibility in controlling security settings.
Stronger Protection Against Breaches
When the feature is activated, the password will be required each time a login is performed after entering the primary verification code. This step will significantly reduce the risks of account breaches, especially in cases of phone number theft or account takeover attempts through social engineering.
The feature is expected to be released in a future app update, as part of WhatsApp's broader direction to strengthen user security, especially with the increasing frequency of digital attacks and fraud attempts via messaging apps.
Why Is This Step Important?
Despite WhatsApp already relying on end-to-end encryption, the weak point is often in the login process itself. Therefore, the additional password represents a new security barrier that could make a significant difference in protecting accounts.
With the continued evolution of hacking methods, this step appears to be a proactive response to strengthen trust in one of the most widely used messaging platforms in the world.



