Wednesday, August 19, 2026

WhatsApp Adds Username Feature to Boost Privacy and Reduce Number Sharing

For years, WhatsApp required users to share their personal phone numbers to communicate. This is finally changing.

To improve user privacy and mitigate risks like doxing or targeted spam, WhatsApp is rolling out a highly anticipated username feature.

This update allows individuals to connect without exposing their phone numbers, offering a new layer of anonymity while maintaining the application’s standard end-to-end encryption.

  • Users can select a unique username to completely hide personal phone numbers from new contacts.
  • An optional four-digit username key acts as a secondary security layer against unwanted contact.
  • Unknown users must enter both your exact username and your unique four-digit code to initiate a chat.
  • All messages sent through the username system remain fully end-to-end encrypted.
  • The new system prevents malicious actors from easily harvesting phone numbers.

Username Technical Rules

  • Usernames must be between 3 and 35 characters in length.
  • Acceptable characters include lowercase letters, numbers, periods, and underscores.
  • Each chosen identifier must contain at least one alphabetical letter.
  • Prefixes like “www.” and domain extensions like “.com” are strictly prohibited to prevent confusion with web links.

Because WhatsApp is part of the Meta ecosystem, username availability is tied to broader platform data.

If a username is already claimed by another user on Instagram or Facebook, it cannot be registered on WhatsApp.

Users who already own a specific username on another Meta platform can claim it on WhatsApp by verifying their account ownership through the Meta Accounts Center.

Security researchers urge users to carefully consider the privacy implications of cross-platform linking, as per reported by Help Net Security.

If you choose the exact same username for WhatsApp and Instagram, unknown actors could easily locate your public social media profiles.

Users seeking maximum operational security should select a completely distinct, unlinked username for their WhatsApp communications.

Rollout and Availability

Currently, the username feature is only available in limited beta testing for users running the latest versions of the application.

The development team is closely monitoring performance and stability before expanding access to the global user base over the coming months.

Once the feature reaches general availability, supported accounts will see a new prompt to create and manage their unique identifier directly within the app’s profile settings.

This long-awaited change marks a significant step forward in secure, private messaging for the platform.

Follow us on Google NewsLinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

CISA Warns Microsoft Internet Key Exchange RCE Flaw Is Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has...

Windows 11 24H2 Home and Pro Support Ends in October 2026

Microsoft has issued a 60-day reminder that the Windows...

Balonx PhaaS Steals Bank OTPs in Real Time While AI Calls and Android RAT Target Victims

Mexico’s banking sector is facing a more industrialized fraud...

659 Stripe Merchant API Keys Leaked Online, Exposing 688,000 Customer Records

A data leak published on a cybercrime data-trading forum...

Cursor 0-Day Lets Attackers Execute Malicious Code by Opening a Repository

A recently disclosed security issue in Cursor IDE exposed...

BeyondTrust Endpoint Privilege Management Flaws Enable Local Privilege Escalation

BeyondTrust has revealed two high-severity vulnerabilities in its Endpoint...

Related Articles

Recent News