WhatsApp has introduced new account-security features designed to make it harder for attackers to take over user accounts, including stronger two-step verification, additional information about calls from unknown numbers and expanded support for passkeys.
The update was announced by WhatsApp in August 2026 as the messaging platform continues to strengthen protections around user accounts. Nigerian technology media has also reported the changes as they roll out to users.
The changes are relevant to Nigerian users because WhatsApp is widely used for personal communication, business conversations, community groups and customer interactions. However, Meta’s announcement does not describe the features as being exclusive to Nigeria.
WhatsApp strengthens two-step verification
One of the main changes is an upgrade to WhatsApp’s two-step verification system.
Previously, users protected their accounts with a six-digit PIN. WhatsApp says it is upgrading this protection to a full password that can contain letters, numbers and special characters.
Two-step verification provides an additional layer of protection beyond the one-time verification code used when registering an account.
The importance of the change is linked to account takeover risks.
If an attacker obtains a user’s one-time verification code through social engineering or another method, an additional password can provide another barrier against unauthorised access.
WhatsApp is therefore encouraging users to make use of the stronger authentication option rather than relying only on the initial verification process.
More information about unknown callers
WhatsApp is also adding more context when an unknown person calls.
On Android, users can see additional information about a caller who is not saved in their contacts, including whether the number is associated with a different country and whether the caller shares any WhatsApp groups with the recipient.
The additional information is intended to help people make a more informed decision before answering an unexpected call.
This can be particularly useful when users receive calls from unfamiliar international numbers or numbers they do not immediately recognise.
WhatsApp says scammers often rely on urgency to persuade people to respond quickly. Providing additional context gives users another opportunity to assess a call before answering.
Passkeys are expanding
WhatsApp also says more than one billion people have now set up passkeys.
Passkeys allow users to authenticate using methods such as a fingerprint, facial recognition or their device’s screen-lock credentials rather than relying on traditional codes or passwords.
WhatsApp has also added the ability for users with both Android and iOS devices to have more than one passkey associated with their account. Users can manage passkeys through Settings > Account > Passkeys.
The system can make account recovery and login more convenient while reducing reliance on verification codes.
Why the changes matter to Nigerian users
WhatsApp has become more than a messaging application for many users.
People use the platform to communicate with relatives, participate in community groups, run businesses, promote products and communicate with customers.
Small businesses may use WhatsApp to receive orders, respond to customers and share payment information.
A compromised account can therefore affect more than personal conversations.
An attacker who gains control of a WhatsApp account could potentially impersonate its owner when contacting friends, relatives, colleagues or customers.
This makes account security an important issue for both individual users and businesses.
Security features are expanding across WhatsApp
The latest update is part of a wider series of security and privacy changes introduced by WhatsApp during 2026.
In January, WhatsApp introduced Strict Account Settings, a lockdown-style feature designed for users who may face highly sophisticated cyberattacks. The setting can automatically block attachments and media from unknown senders, silence calls from people users do not know and restrict certain account settings.
In June, WhatsApp also said it had disrupted spear-phishing attempts linked to NSO, a spyware company, highlighting the continuing security risks faced by messaging platforms and their users.
The company has also continued developing privacy-focused AI features.
In May, WhatsApp announced Incognito Chat with Meta AI, which it described as a temporary and private way to interact with Meta AI. According to Meta, conversations in the feature are processed in a secure environment and are not saved by default.
WhatsApp is changing beyond security
Security is not the only area where WhatsApp has introduced major updates this year.
In August, the company announced improvements to group chats, including more flexible polls, an @all mention and the ability to create new chats from existing groups. Polls can now have an end time, voter names can be hidden and poll questions can be edited for a limited period after creation.
WhatsApp also introduced calling through WhatsApp Web.
Users can make and receive one-to-one and group audio and video calls directly from WhatsApp Web, while call transfer allows an active call to be moved between devices. The company also introduced waiting rooms for certain group calls, improved video quality and background-noise suppression.
These updates show that WhatsApp is increasingly being developed as a service that works across phones, computers and other devices rather than simply as a mobile messaging application.
Users should still take basic precautions
New security features can reduce risk, but they do not eliminate the possibility of scams or account theft.
Users should avoid sharing WhatsApp verification codes with other people, even when someone claims to be a friend, company representative or WhatsApp employee.
Unexpected requests for money should also be independently verified.
Users should be particularly careful when someone suddenly claims that they have changed their phone number or asks for urgent financial assistance from a WhatsApp account that appears familiar.
Enabling two-step verification and a passkey where available can add additional protection.
Users should also keep WhatsApp and their phone’s operating system updated so that security improvements and relevant fixes can be applied.
WhatsApp usernames are also coming
Another significant change announced by WhatsApp is the introduction of usernames.
In June, Meta said users could begin reserving usernames ahead of the feature’s wider launch later in 2026. The company said usernames would allow people to connect without necessarily revealing their phone number to a new contact.
WhatsApp said the feature would be rolled out gradually and that users would be notified when it becomes available in their country.
For businesses, creators and organisations, the change could provide another way to establish a WhatsApp identity without immediately exposing a personal phone number.
However, availability should be checked directly inside WhatsApp because the company is rolling the feature out gradually.
What Nigerian WhatsApp users should check
Users who want to strengthen their accounts can review several settings.
They should check whether two-step verification is enabled and whether their authentication information is up to date.
Users should also review the passkeys section under their account settings if the feature is available on their device.
Unknown calls should be treated carefully, particularly when the caller creates pressure or asks for sensitive information.
Users should also be cautious with links sent through messages, especially when the message claims that an account will be suspended or that an urgent payment is required.
A continuing focus on account protection
WhatsApp’s latest security update reflects the growing importance of protecting digital accounts that are used for both personal and commercial communication.
The platform is adding stronger authentication, more information about unfamiliar callers and broader passkey support while continuing to introduce other privacy and security controls.
For Nigerian users, the practical benefit will depend partly on when individual features reach their devices and accounts.
The safest approach remains to enable available security protections, keep the application updated and independently verify unusual requests before taking action.
WhatsApp’s latest changes therefore add another layer to the platform’s ongoing effort to make account access harder for attackers while giving users more information and control over how they interact with unfamiliar contacts.
Community
Comments
Keep discussion respectful and relevant. Comments never affect rewards.
No comments yet. Start a respectful conversation.