WhatsApp upgrades its 6-digit PIN to a stronger password

WhatsApp is tightening account security with a new account password that upgrades the app’s existing 6-digit two-step verification PIN, while also expanding its passkey push across the service. The new password uses letters and numbers instead of a six-digit code, giving users a stronger credential for protecting access to their account. WhatsApp also says more than 1 billion users have already added a passkey. What remains unclear is when the password change will reach individual accounts, which users will get it first, and whether it fully replaces the old PIN or arrives as an optional setup.

WhatsApp’s new account password swaps out the 6-digit PIN

WhatsApp’s current two-step verification system is built around a 6-digit PIN. The new account-security change upgrades that baseline with an account password made of letters and numbers, a format that is harder to guess than a short numeric code. That makes this the most visible part of the update: instead of relying on six numbers alone, users are being moved toward a stronger credential model for protecting the account behind their phone number.

For people who use WhatsApp for customer communication, support, or sales, that change has a practical effect. Losing access to a business-facing WhatsApp account can mean missed leads, broken support threads, and downtime on a number customers already know. A stronger sign-in and verification layer does not eliminate lockout risk, but it raises the bar for account takeover compared with the older PIN-based setup.

Passkeys cross the 1 billion-user mark

WhatsApp is pairing that password change with a broader passkey push. The company says more than 1 billion users have already added a passkey to their account, giving this security update a concrete adoption milestone rather than just a product promise. In practice, that number shows passkeys are no longer a niche option inside WhatsApp’s security settings.

Together, the two updates point in the same direction: stronger account access controls and less reliance on weak credentials. The new account password improves the existing two-step verification model, while passkeys give WhatsApp another path to protect logins with a more modern authentication method. WhatsApp is also positioning the security push around account recovery, not only prevention, which matters for users who cannot afford extended access problems.

Rollout and recovery details are still missing

The biggest unanswered question is availability. WhatsApp has not confirmed when the new password option will roll out, whether it is tied to specific regions, devices, or account types, or whether users are seeing it in stable builds or a limited release. That means readers should treat this as an active security update with incomplete rollout visibility, not as a feature guaranteed to be live on every account today.

It is also still unclear how the transition from the current 6-digit PIN will work in practice. WhatsApp has not explained whether the letters-and-numbers password replaces the PIN for all users, appears only as an optional setup for some accounts, or how recovery works if someone loses access after enabling it. Until those details are published inside the app or in official support material, the safest practical takeaway is straightforward: if you already rely on WhatsApp for business operations, check your account-security settings, use passkeys where available, and watch for a stronger password option to appear.

Disclaimer: This article was created with the assistance of AI. Images are for illustrative purposes only.