Cyber Security News

WhatsApp Rolls Out Optional Password Feature to Strengthen User Security

WhatsApp is developing a new feature to significantly strengthen account security by introducing optional account passwords.

Currently available in the Google Play Beta Program through version 2.26.7.8, this functionality aims to add another robust layer of defense against unauthorized access and account takeovers.

While still under development and not yet available for beta testing, this upcoming security enhancement builds upon existing account protection measures.

The primary goal is to provide users with an additional barrier, further securing their accounts beyond the standard SMS verification codes.

The new account password system will require users to create an alphanumeric string between 6 and 20 characters long.

This password must contain at least one letter and one number to ensure complexity. Once implemented, WhatsApp will provide feedback on password strength during the setup process.

Password Feature (Source: wabetainfo)

Users will maintain full control over this feature, retaining the ability to update, modify, or completely remove the password at any time through the application settings.

This entirely optional feature gives users the flexibility to choose their preferred level of security.

When enabled, the account password will be required immediately after entering the initial 6-digit verification code during the login process.

According to WABetaInfo, the system is designed to work in tandem with existing security features.

If a user has both an account password and two-step verification enabled, they will be prompted to enter the two-step verification code first, followed by the account password.

This multi-layered approach ensures that even in scenarios where an attacker compromises the initial 6-digit code such as through SIM swapping attacks and somehow obtains the two-step verification code, they would still be unable to access the account without the password.

This development follows WhatsApp’s previous efforts to improve account recovery and security, such as the introduction of email address verification.

The email verification feature allowed users to regain access to their accounts when unable to receive standard SMS codes, providing an alternative recovery method.

By introducing passwords, WhatsApp intends to maximize account security and significantly reduce the risk of account compromises.

Although the likelihood of an attacker obtaining both an SMS verification code and a two-step verification PIN remains low, the password feature provides a critical fail-safe.

SpecificationDetails
Feature NameWhatsApp Account Password
Development StatusUnder development (Beta 2.26.7.8)
Password Requirements6-20 characters, alphanumeric (at least one letter and one number)
Security IntegrationWorks with existing 6-digit verification and Two-Step Verification (2FA)
User ControlOptional setup; can be updated or removed anytime

The feature is currently being refined to ensure optimal performance and security.

Once development and testing are completed, WhatsApp plans to gradually roll out the password feature in a future update, providing users with enhanced tools to protect their communications.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago