WhatsApp has introduced new account-security measures, including support for multiple passkeys and stronger two-step verification options, in a move aimed at making it harder for attackers to take control of users’ accounts.

The Meta-owned messaging platform rolled out the changes on August 25, adding more flexibility to how users secure their accounts.

Passkeys provide an alternative to traditional passwords and SMS-based verification codes by using cryptographic credentials tied to a user’s device. WhatsApp says passkeys are designed to offer a secure and convenient way to protect accounts.

The latest update also strengthens two-step verification, an optional security layer that requires users to create a separate PIN to help prevent unauthorised access even if someone obtains their registration code.

The changes come as messaging platforms face growing attempts at account hijacking, phishing and social-engineering attacks. WhatsApp continues to advise users never to share their six-digit registration code or two-step verification PIN with anyone.

For WhatsApp users, the new security tools offer an additional layer of protection while keeping account verification less dependent on SMS codes and traditional passwords.