WhatsApp has introduced new security features to strengthen account protection, including improved two-step verification and support for multiple passkeys.
The updates aim to make it harder for criminals to take control of users’ accounts. However, stronger authentication cannot prevent scams that trick people into giving attackers access.
WhatsApp has faced different security threats over the years. Attackers previously exploited vulnerabilities to install spyware without requiring users to take action.
More recently, criminals have increasingly relied on phishing and social engineering. These scams manipulate users into revealing information or approving access themselves.
Fake QR codes and call-forwarding scams remain among the methods used to compromise accounts. Therefore, users should combine WhatsApp’s new security tools with basic precautions.
Babar Azam Returns to Training as Pakistan Prepare for Lord’s Test
One key risk involves unauthorized linked devices. Even strong authentication may not protect an account if someone is tricked into linking an attacker’s browser or device.
Users should regularly check Settings > Linked Devices. They should review every connected computer, browser and phone. Any unfamiliar device should be removed immediately.
WhatsApp also recommends reviewing privacy and security settings. Users can enable features that help limit unwanted messages from unknown accounts. They can also use options designed to protect their IP address during calls.
Meanwhile, Android users will receive additional information about calls from unknown numbers. WhatsApp may indicate whether the caller is from another country. It may also show whether both users belong to any of the same groups.
This information can help users assess an unfamiliar caller before answering.
However, users should remain cautious. They should never scan a WhatsApp QR code or enter a device-linking code because an unexpected message, website or person claiming to be support asks them to.
The new features add another layer of protection. Still, regular linked-device checks and caution around unexpected messages, calls and verification requests remain essential for account security.
