WhatsApp is working on an important security upgrade. The company is testing a change that will replace the current 6-digit PIN in two-step verification with a proper password. This move aims to make account protection stronger and harder for attackers to break.
The feature is currently under development in the WhatsApp Android beta. It is not yet available for public testing, and WhatsApp has not officially confirmed a release date.
How the New Password Feature Works
WhatsApp currently uses a simple 6-digit PIN for two-step verification. Users enter this PIN when they reinstall the app or switch devices. The new system will allow users to set a password that includes both letters and numbers.
The password must be between 6 and 20 characters long and must contain at least one letter and one number. This change significantly increases the number of possible combinations compared to a pure numeric PIN.
Once the feature rolls out, existing users who already have two-step verification enabled will likely be guided to create a new password. WhatsApp is expected to notify users and help them through the transition.
Why This Change Matters for Security
A 6-digit PIN has only one million possible combinations. Modern attack tools can try many of these combinations quickly. An alphanumeric password with letters and numbers creates far more possible combinations, making brute-force attacks much harder.
For Indian users, this upgrade is especially relevant. WhatsApp remains the primary messaging app for personal chats, business communication, and even payments through UPI integration. Account takeovers and OTP-based scams are common, so stronger protection can reduce risk.
The feature will still remain optional. Users who prefer simplicity can continue without enabling two-step verification.
Current Status and Availability
The change was discovered in WhatsApp beta for Android version 2.26.29.4. It is not yet enabled for beta testers, which means the feature is still in an early development stage.
No official timeline has been shared. WhatsApp often tests security features for months before a wider rollout. iOS users will likely receive the update later once Android testing is complete.
Impact on Existing Users
If you already use two-step verification with a PIN, you will probably need to create a new password when the feature becomes available. WhatsApp usually provides clear in-app guidance for such transitions.
Users who have linked an email address for recovery will find the process smoother. Those without an email recovery option should consider adding one before the change arrives.
Also read: WhatsApp Testing New Feature to Pin Channel Updates on iOS
