WhatsApp Plans Password‑Based Two‑Step Verification

If you’ve ever set up WhatsApp’s two‑step verification, you’ll remember typing in a short, six‑digit PIN after you receive the SMS code. That extra step is meant to keep strangers from hijacking your number, but the old method isn’t bullet‑proof.

Recently, developers spotted a new flag inside the Android beta (version 2.26.29.4) that points to a different kind of lock‑step: a dedicated password. Unlike the numeric PIN, this password could be any length and mix letters, numbers, even symbols, giving you far more combinations to work with.

Why the shift? A six‑digit PIN only offers about a million possible codes – easy enough for automated guesses or for someone to guess your birthday, anniversary, or a pattern like “123456”. A proper password expands the search space dramatically, making brute‑force attacks far less practical.

That said, the security gain still hinges on how you choose the password. Re‑using the same password you have on other services, or picking something obvious like “password123”, would defeat the purpose. In short, the better the password you pick, the stronger the protection.

Don’t confuse this new password with WhatsApp’s existing passkey feature, which relies on your device’s biometric or screen‑lock authentication, nor with the 64‑digit key that encrypts chat backups. Those are separate layers; the password would simply sit alongside the usual SMS verification, adding a second hurdle instead of replacing the phone‑number check.

For now, nothing needs to change on your end – the password option isn’t rolled out to regular users yet. If you want to keep your account safe today, head to Settings → Account → Two‑Step Verification, set a PIN that isn’t easy to guess, attach a recovery email, and never share the verification code with anyone who calls claiming to be WhatsApp.

Since the feature is still under development, its exact UI and rollout timeline may shift. Keep an eye on future updates, and when the password option finally arrives, treat it as another piece of the puzzle that helps keep your chats private.