Table of Contents
- What WhatsApp Actually Announced
- Quick Reference: Problems and Fixes
- How WhatsApp Passkeys Actually Work
- Setting Up a Passkey the First Time
- When the Passkey Just Won’t Work
- Using WhatsApp Passkeys Across Two Phones
- The New Two-Step Verification Password, Explained
- What Happens if You Forget the New Password
- The New Caller Context Feature on Android
- Should You Actually Switch to a Passkey?
- Frequently Asked Questions
- Final Thoughts
WhatsApp just shared a milestone that’s easy to skim past in a headline but actually says a lot: over a billion people are now using WhatsApp passkeys to log into their accounts instead of typing an SMS code. Alongside that, the company quietly rolled out a stronger two-step verification password and a new feature that gives you more context before you pick up a call from an unknown number.
If you’ve landed here, you’re probably in one of two camps. Either you’re curious what these changes actually mean for your account, or you already tried setting up WhatsApp passkeys and hit a wall. This one covers both, with the real fixes for the problems people are actually running into.
What WhatsApp Actually Announced
On August 25, 2026, WhatsApp published an update covering three separate changes. The company confirmed that more than a billion people have already set up WhatsApp passkeys, and you can now register more than one on the same account if you switch between an Android phone and an iPhone.
Two-step verification also got an overhaul. Instead of the old six-digit PIN that’s been around since 2017, you can now set a full alphanumeric password with special characters, which is a lot harder to guess or brute-force than “123456.”
The third change is smaller but useful. On Android, calls from numbers not saved in your contacts now show extra context, like whether the number is calling from a different country or whether you share any groups in common. According to WhatsApp’s own announcement, this is meant to give people a moment to think before answering a call that might be a scam.
Quick Reference: Problems and Fixes
The table below covers the most common WhatsApp passkeys and account security issues people are searching for right now.
| Problem | Likely Cause | Fix |
|---|---|---|
| Passkey not found after reinstalling | Biometric data not synced to a password manager | Sign into iCloud Keychain, Google Password Manager, or your third-party manager first |
| “Something went wrong” during setup | Temporary glitch or unsupported OS version | Update your phone’s OS, then try setup again |
| Biometric prompt doesn’t recognize you | Face ID or fingerprint sensor issue | Re-enroll your biometric in phone settings, or use device PIN fallback |
| Passkey works on one phone but not the other | Only one device has a registered passkey | Add a second passkey manually from Settings on the other device |
| Forgot new two-step verification password | No recovery email was added | Use the recovery email if set, otherwise wait 7 days for automatic reset |
| Getting the same scam call context on every screen | Feature only live on Android currently | No fix needed; iOS version hasn’t rolled out yet |
How WhatsApp Passkeys Actually Work
A passkey replaces the old SMS verification code with something tied directly to your phone. Instead of waiting for a text message and typing in a string of numbers, you unlock WhatsApp using your fingerprint, face scan, or your phone’s screen lock, whichever your device already uses.
Behind the scenes, this relies on the same passkey technology used by Google, Amazon, and a growing number of other big platforms, built on public key cryptography rather than a password sitting on a server somewhere. Your actual biometric data never leaves your device. WhatsApp just checks that your device confirms it’s really you. That’s the whole appeal of WhatsApp passkeys over the old system: nothing to intercept, nothing to phish.
Read Our Article About Whtasapp Username Updates
Setting Up a Passkey the First Time
Setup takes under a minute for most people. Open WhatsApp, go to Settings, then Account, then Passkeys, and follow the prompt. Your phone will ask you to confirm with whatever biometric method it already uses, Face ID, a fingerprint, or your screen lock code.
Once that’s done, the next time you reinstall WhatsApp or switch devices, you’ll be prompted to use that same biometric method instead of waiting on an SMS code. No typing, no waiting for a text that might get delayed by your carrier. This is really the entire point of WhatsApp passkeys: one tap instead of a code you have to copy and paste.
When the Passkey Just Won’t Work
This is where most of the frustration around WhatsApp passkeys actually shows up. A fair number of people set up a passkey successfully, then reinstall the app weeks later and get an error saying the passkey can’t be found at all.
Nine times out of ten, this comes down to where your passkey is actually stored. On iPhone, it lives in iCloud Keychain. On Android, it’s usually Google Password Manager or Samsung Pass if you’re on a Samsung device. If you’re signed out of that account, or you switched to a new phone without transferring your keychain data, WhatsApp genuinely has nowhere to pull your WhatsApp passkeys from.
The fix is almost always to sign back into the same iCloud or Google account you used when you first set up the passkey, then retry. If you use a third-party password manager like 1Password, Bitwarden, or Dashlane, make sure that app is installed and signed in on the new phone before you attempt to log into WhatsApp.
If your biometric sensor itself is the problem, the fastest fix is heading into your phone’s own settings and re-enrolling your fingerprint or face scan. A dirty sensor or a recent screen protector can throw this off more than people expect. And if biometrics fail entirely, WhatsApp automatically falls back to your device’s screen lock PIN, so you’re not actually locked out of WhatsApp passkeys even when Face ID has a bad day.
Using WhatsApp Passkeys Across Two Phones
If you use both an Android phone and an iPhone, this update is specifically for you. Previously, a passkey was tied to a single device, which meant switching phones or using two at once created a real headache. Now you can register a separate passkey on each device from the same Settings > Account > Passkeys menu.
The catch is that you have to do this manually on both devices. Setting a passkey up on your iPhone doesn’t automatically create one on your Android phone too, since they use entirely separate secure storage systems under the hood. Anyone managing WhatsApp passkeys across two operating systems needs to repeat the setup step on each one.
Read Our Article About How To Work On Etsy
The New Two-Step Verification Password, Explained
Two-step verification is a separate layer from your passkey, and it protects you in a different scenario: someone getting hold of your actual verification code and trying to register your number on a new device. This is worth understanding clearly, since WhatsApp passkeys and two-step verification solve two different problems, not the same one. Until now, this was just a six-digit PIN.
That PIN is being replaced with a real password, at least eight characters, including a mix of letters and numbers, with the option to add special characters too. If your current PIN is something predictable like your birth year or “123456,” this update is a good nudge to actually change it to something stronger.
How to Update It
Go to Settings, then Account, then Two-step verification. If it’s already turned on, you’ll see the option to change your existing PIN to the new password format. If you’ve never turned it on, this is a reasonable moment to do it, since it closes a gap a passkey alone doesn’t fully cover.
What Happens if You Forget the New Password
This is the part that worries people the most, and fairly so, since a forgotten password used to just mean a forgotten six-digit number. Add a recovery email while you’re setting this up. It’s genuinely the only quick way to reset your two-step verification if you forget the new password later.
Without a recovery email on file, you’re not permanently locked out, but you will need to wait it out. WhatsApp’s long-standing policy allows your number to re-verify without the passcode after seven days of not using the app, though you’ll lose any messages that were pending during that gap. After 30 days without your passcode, the account resets entirely and starts fresh. Neither of these is a fast fix, which is exactly why adding that recovery email up front matters so much more with a full password than it did with a simple PIN.
The New Caller Context Feature on Android
This one’s smaller in scope but directly useful against scam calls. When someone not saved in your contacts calls you, Android users now see extra details before deciding whether to answer, including whether the number appears to be calling from another country and whether you have any WhatsApp groups in common with that number.
The idea, as WhatsApp put it, is that scammers rely on urgency to stop you from thinking clearly. A few extra seconds of context before you answer gives you room to pause instead of reacting on instinct. This feature is currently Android-only, so if you’re on iPhone and don’t see it yet, that’s expected rather than a bug on your end.
Should You Actually Switch to a Passkey?
If you’re still relying on SMS codes and wondering whether switching to WhatsApp passkeys is worth the hassle, the honest answer is yes for most people. SMS codes can be intercepted through SIM-swapping or phishing, and they depend on your carrier actually delivering the text on time, which doesn’t always happen. A passkey removes both of those weak points, since it never leaves your device and doesn’t depend on a text message arriving at all.
The one group who should be a bit more careful is anyone who frequently resets their phone to factory settings without backing up their password manager first. Since your passkey lives inside that manager, wiping it without a proper backup is the single most common way people accidentally lock themselves out.
Frequently Asked Questions
Do I still need my phone number if I set up a passkey? Yes. WhatsApp passkeys replace the verification code step, not your phone number itself, since WhatsApp accounts are still tied to a specific number.
Can I use a passkey and two-step verification at the same time? Yes, and it’s actually the safer setup. WhatsApp passkeys protect your login, while two-step verification protects against someone else trying to register your number on a different device.
What happens to my old six-digit PIN after this update? Your existing PIN keeps working until you choose to update it. WhatsApp isn’t forcing everyone to switch immediately, though it’s clearly recommending it, especially for anyone using a weak or reused PIN.
Is the caller context feature coming to iPhone? WhatsApp hasn’t given a specific date, but the announcement covered Android for this particular feature. Passkeys and the updated two-step verification password are already available on both platforms.
I deleted my old device. Can I still recover my passkey? Only if your WhatsApp passkeys were backed up through iCloud Keychain, Google Password Manager, or a third-party manager tied to an account you can still access. If that backup doesn’t exist, you’ll need to fall back to standard SMS verification to get back into your account.
Final Thoughts
The direction here is pretty clear: WhatsApp wants fewer accounts depending on a text message that can be intercepted, delayed, or phished, and a billion people already made that switch to WhatsApp passkeys without much friction. The actual problems people run into almost always trace back to where the passkey is stored rather than anything wrong with WhatsApp itself, so checking your password manager and keeping a recovery email on file solves most of what shows up in this guide. If you haven’t set one up yet, it takes less time than reading this sentence twice, and it closes a security gap that SMS codes were never really built to handle.
