WhatsApp now accepts complex passwords and multiple passkeys to strengthen account access against common hijacks. MakeUseOf reported that change on August 25, 2026, and said every user should turn the new security feature on immediately. If you use the app for family, work, or the town group chat, this is the update you actually need to act on.

Account takeovers are not a rare tech-blog scare story. Someone gets a foothold, they slide into your chats, and suddenly they are you. Then they hit your contacts for money, they read private messages, and they lock you out of your own life. A stronger lock on the front door will not fix Meta. It will make that smash-and-grab a lot harder.

What WhatsApp actually added

The update is two parts, and both of them matter for regular people.

• Complex passwords for two-factor protection. That means a real password, long and unique, not something a stranger can guess.
• Multiple passkeys. You can store more than one, so account access is not hanging off a single phone.

The point of the change, according to the report, is to strengthen account access against common hijacks. Skip the branding. Care about the lock.

Why hijacks still hit normal people

Most folks I know treat WhatsApp like the kitchen phone. Always on. Full of job quotes, school pickup plans, and half the family photo album. They are not thinking about phishing texts and stolen logins. The crooks are.

A hijacked WhatsApp account is a skeleton key to your relationships. Your sister will believe a message that looks like it came from you. Your customers will too. That is why this setting is not optional in my book, even if WhatsApp left it for you to turn on.

Passwords and passkeys in plain English

A complex password means long, unique, and not the same one you use for email. Put it in a password manager if you have one. If you do not, write it down and keep it off the phone.

A passkey lives on a device you already trust. Multiple passkeys mean you can add a second phone, a tablet, or a computer you actually control. If one device dies, you still have another way in. If a thief only has one of them, they do not own the whole thing.

What you should do this week

• Open WhatsApp and find the new two-factor and passkey settings.
• Set a complex password you do not use anywhere else.
• Add more than one passkey on devices you actually own.
• Make sure you still have a way back in if the phone goes in a lake. Recovery is part of security, not an afterthought.
• Tell the people you help with tech to do the same. Parents, shop owners, the neighbor who only uses WhatsApp. They are the ones hijackers love.

Big tech will keep collecting data. You cannot fix that from a settings menu. You can make it a lot harder for a stranger to wear your name. Turn the feature on, use a real password, and add a second passkey. Then go back to your life.

Primary Source: https://www.makeuseof.com/whatsapp-new-security-update-adds-complex-2fa-passwords/