WhatsApp Is Replacing Its Six-Digit Security PIN with a Real Password
August 25, 2026 – 7:32 pm
Credit: microsiervos
WhatsApp is phasing out its six-digit security PIN for two-step verification in favor of a full alphanumeric password, allowing letters, numbers, and special characters. Over a billion users have already created passkeys. Additionally, Android users will now see context about calls from unfamiliar numbers.
A Quiet Shift to Passwordless Authentication
WhatsApp has quietly become the largest passwordless deployment globally. More than a billion users have adopted passkeys, surpassing any other consumer service.
The Benefits of a Passkey
A passkey, which replaces the phone’s PIN with a password, offers a more secure and convenient experience. Instead of relying on SMS codes, users can confirm with biometric data or screen locks already protecting their devices.
Addressing Rate Limits and Multi-Device Security
The change to a full password is long overdue and addresses rate limits that made the six-digit PIN less effective. Users with multiple phones can now set separate passkeys for Android and iOS.
Scams and Contextual Awareness
A new feature targeting scams, currently available only on Android, adds context to calls from unfamiliar numbers, such as their country of origin or whether they share groups with the user.
Regulatory Changes and Interoperability
This update comes as WhatsApp is required to open up to third-party services under the Digital Markets Act in Europe. While passkeys protect individual WhatsApp accounts, the interaction with other services’ accounts is unclear.
Europe’s Digital Identity Plans
Europe is developing its own digital identity solution, with state-issued digital wallets. WhatsApp’s update and regulatory changes in Europe highlight the region’s focus on digital identity and interoperability.