WhatsApp Rolls Out Three Major Security Upgrades

WhatsApp has introduced three major security enhancements for its iOS and Android platforms. Among these upgrades is a robust two-step verification system, which now allows users to substitute their traditional PIN with a more secure password. This new password requirement must include at least eight characters, a letter, and a number, heightening security as passwords offer exponentially more possible combinations than a simple PIN.

The upgraded verification feature is being phased in for certain Android and iOS users, gradually becoming available to more accounts.

Further bolstering security, WhatsApp has extended support for multiple passkeys. Users can now associate several passkeys with their accounts, offering an alternative to traditional password-based authentication. These passkeys utilize device-specific authentication methods, adding an extra layer of protection against unauthorized account access.

To assist users in discerning potential threats, WhatsApp is rolling out enhanced information about unknown callers for Android users. When receiving a call from an unidentified number, the app will display whether the caller's number originates from another country and how many mutual groups the user and caller share. This additional context should help users determine if the call might be legitimate or potentially suspicious.

While quietly testing other security features, WhatsApp is developing a Scam Alert mechanism. This feature, currently being piloted among a select group of Android beta testers, employs an on-device machine learning algorithm to scrutinize messages from unknown contacts for scam indicators. The analysis occurs solely on the user's device, ensuring privacy, and if the system identifies a potential scam, it alerts the user with a warning and allows them to block or report the sender or mark the conversation as trusted. Scam Alert is currently an optional feature, disabled by default.