WhatsApp hijacking scams are everywhere. A stranger asks for “the code I sent by mistake,” and minutes later your WhatsApp account belongs to them. WhatsApp two-step verification stops this attack cold. This guide shows how to turn it on, how it works and what to do if you forget your PIN.
Contents
- What is WhatsApp two-step verification?
- How to turn on WhatsApp two-step verification
- Choose a strong PIN
- Protect your WhatsApp account from common scams
- What if you forget your PIN?
- How to change or turn off the PIN
- Extra ways to secure your WhatsApp account
- What happens if someone tries to use your number
- Frequently asked questions
- Is two-step verification the same as the SMS code?
- Can someone hack my WhatsApp with two-step verification on?
- Will I lose my chats if I forget the PIN?
- Related on Froshvibes
What is WhatsApp two-step verification?
Normally, WhatsApp confirms your number with a six-digit SMS code when you register on a new phone. If a scammer tricks you into sharing that code, they can take over your account.
Two-step verification adds a second lock: a six-digit PIN that only you know. Anyone who tries to register your number on another phone must enter both the SMS code and your PIN. Without the PIN, they can’t get in.
How to turn on WhatsApp two-step verification
The steps are almost the same on Android and iPhone.
- Open WhatsApp and go to Settings.
- Tap Account › Two-step verification.
- Tap Turn on (or Enable).
- Enter a six-digit PIN and confirm it.
- Add an email address. This step is optional, but it lets you reset the PIN if you forget it.
- Confirm the email and tap Done.
That’s all. The whole process takes less than two minutes. WhatsApp explains the feature on its official two-step verification help page.
Choose a strong PIN
Avoid obvious numbers such as 123456, 000000, your birthday or the last digits of your phone number. Pick something random that you can remember. If you use a password manager, store the PIN there.
WhatsApp will occasionally ask you to enter the PIN. This reminder helps you remember it, so don’t skip it.
Protect your WhatsApp account from common scams
Two-step verification is powerful, but scammers still try clever tricks. Watch out for these:
- “I sent you a code by mistake.” Never share any WhatsApp code, even with a friend. Their account may already be hacked.
- Fake WhatsApp support. WhatsApp will never message you asking for your PIN or code.
- Voicemail attacks. Some scammers request a voice call code that goes to your voicemail. Set a voicemail PIN with your network to block this.
- Phishing links. Don’t tap links promising prizes, free data or “account verification.”
Our guide on how to protect your phone from hackers covers more ways to stay safe.
What if you forget your PIN?
If you added an email address, tap Forgot PIN? when WhatsApp asks for it. WhatsApp sends a reset link to your email. Follow it, and you can set a new PIN.
If you didn’t add an email, you’ll have to wait seven days before you can verify the number again without the PIN. So it’s worth adding an email when you set things up.
How to change or turn off the PIN
Open Settings › Account › Two-step verification. From there, you can change the PIN, change the email address or turn the feature off. We recommend keeping it on at all times.
Extra ways to secure your WhatsApp account
For even stronger protection, combine two-step verification with these settings:
- Passkey: newer versions of WhatsApp let you sign in with your phone’s fingerprint, face or screen lock.
- App lock: under Settings › Privacy, require a fingerprint or face unlock to open WhatsApp.
- Linked devices: check Settings › Linked devices regularly and log out any computer you don’t recognise.
- Chat backup encryption: protect your backups with a password or key.
- Privacy settings: limit who can see your profile photo and add you to groups.
Switching phones soon? Read how to transfer WhatsApp from Android to iPhone, and back up first with our guide on how to back up your phone.
What happens if someone tries to use your number
With two-step verification on, a scammer who gets your SMS code still hits a wall. WhatsApp asks them for your six-digit PIN. If they guess wrong, they can’t continue, and your account stays on your phone.
You may also receive a WhatsApp code by SMS that you didn’t request. That’s a sign someone is trying to register your number. Don’t share the code with anyone. Instead, make sure two-step verification is on, check your linked devices and warn your contacts to ignore any strange requests that seem to come from you.
If you ever lose access to your account, reinstall WhatsApp, verify your number with the SMS code and enter your PIN. This logs the intruder out. Then change your PIN straight away and review your security settings.
Finally, share this guide with family members. Parents and grandparents are often targeted, and turning on this one setting protects them too.
Frequently asked questions
Is two-step verification the same as the SMS code?
No. The SMS code confirms your phone number. The PIN is a separate secret that you create yourself.
Can someone hack my WhatsApp with two-step verification on?
It becomes much harder. Without your PIN, they can’t register your number on a new phone.
Will I lose my chats if I forget the PIN?
Not if you reset it by email. Keep regular backups too, just in case.
Related on Froshvibes
