Urgent.News

What's breaking now, across thousands of outlets.

Tech

WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android

Meta on Tuesday announced a set of WhatsApp account security features, including support for multiple passkeys to a single account to help users with both iOS and Android devices sign into their accounts using the phishing-resistant method. The tech giant said more than 1 billion people use a passkey to log into WhatsApp. Support for passkeys was first introduced in Android in October 2023,

WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android

WhatsApp has recently introduced enhanced security measures to safeguard user accounts, including a more robust two-step verification process and the capability to incorporate additional passkeys. These updates aim to bolster account safety amidst escalating phishing and hacking threats. Previously, WhatsApp utilized a six-digit PIN as an additional security measure to thwart unauthorized access even if an attacker obtained the user's one-time passcode.

However, users can now opt for a longer, alphanumeric password with special characters, making it more challenging to guess the PIN. Moreover, passkeys, which WhatsApp began supporting in 2024, offer an even higher level of security than traditional passwords. By enabling users to log in using Face ID or their fingerprint, passkeys reduce reliance on username and password combinations that are often vulnerable to phishing attacks.

As a result, attackers would need direct access to a user's device to bypass these passkeys, making them significantly more difficult to exploit remotely. In addition to the strengthened verification process, WhatsApp has introduced the ability to include multiple passkeys within a single account, which proves beneficial for users who employ both iOS and Android devices.

This feature ensures seamless access across platforms while maintaining a high level of security. Furthermore, Android users will now receive additional context when receiving calls from unfamiliar numbers. This information includes the caller's country of origin and any shared groups, providing users with greater insight into the nature of incoming calls.

These new features complement the expanding suite of updates WhatsApp has rolled out in recent months. Following the introduction of usernames in late June, allowing individuals to share their profiles sans phone number, Meta recently unveiled a subscription plan for WhatsApp, dubbed WhatsApp Plus. This premium tier unlocks a plethora of additional features, such as profile customization, super reactions, story insights, and more.

The WhatsApp Plus plan joins similar "Plus" offerings for Instagram and Facebook, expanding Meta's suite of premium services.

Written by urgent.news from TechCrunch's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

This story

This is one outlet's version. Read the fullest account.

Read the original at thehackernews.com →

More in Tech

Why I Built a Waitlist Tool That Forces You to Validate Before You Code

I've lost count of how many side projects I've abandoned. Not because the code didn't work — because nobody wanted what I'd built.

  • Author abandoned side projects due to poor validation, leading to wasted effort
  • Created WaitlistTest tool to validate ideas before coding, emphasizing validation-first approach

Robinhood Chain: Three Things the Docs Don't Say

Originally published on xroot.dev . I spent a day reading Robinhood Chain with eth_call instead of reading about it. Three things turned up that no documentation page mentions — and one of them is a…

  • Chain ID is 0x1237 (4663) on Arbitrum Orbit L2
  • Operated by Robinhood with permissionless deployment
  • ABI lacks transfer restrictions despite source code showing "onlyNotBlocked" modifier

Clicks Rose 73%. I Shut the Site Down.

In June I fixed a real problem on a small editorial site I run. The site was a client-side app — the kind where the server sends a nearly empty HTML shell and the browser assembles the actual page…

  • Clicks rose 73% on the editorial site
  • Site shut down due to performance decline
  • Top pages accounted for 91% of impressions

More from Tuesday 25 August →