How to Turn On WhatsApp Two-Step Verification
Two-step verification adds a PIN that stops someone taking over your WhatsApp even if they get your six-digit code. Step-by-step setup on Android and iPhone, plus adding a recovery email.
The most common way WhatsApp accounts are stolen is simple: a scammer registers your number on their phone and tricks you into sharing the six-digit code WhatsApp sends you. Two-step verification adds a second lock, a PIN only you know, so the code alone is not enough.
How to turn it on
- Open WhatsApp and go to Settings (on Android, tap the three dots first).
- Tap Account, then Two-step verification.
- Tap Turn on (or Create PIN).
- Enter a six-digit PIN you will remember but others cannot guess. Avoid birthdays and 123456.
- Add an email address when asked. This lets you reset the PIN if you forget it.
- Confirm the email address using the link WhatsApp sends you.
Nobody genuine will ever ask for your PIN or your six-digit code. Not WhatsApp, not a friend, not a "support agent". See the verification code scam.
What it protects against
- Someone who got your registration code by tricking you or intercepting a text.
- Someone who took over your number through a SIM swap.
- Someone who got into your voicemail to hear a voice code. See voicemail hacking.
What it does not protect against
It does not stop someone using a device you have already linked, such as a computer. Check linked devices regularly. It also does not stop scams that persuade you to send money.
Got a message asking for a code or PIN? Paste it into CyberWatch AI Scan for a free check.
Next, run through our ten-minute WhatsApp security checkup. For everything else, see our complete guide to WhatsApp scams.
Frequently asked questions
What happens if I forget my WhatsApp PIN?
If you added an email address, you can reset the PIN through a link sent to it. Without one, you may have to wait before you can re-register without the PIN.
Will WhatsApp ask for my PIN often?
It asks now and then to help you remember it, and always when you register your number on a new phone.
Is the PIN the same as my registration code?
No. The six-digit registration code arrives by text or call. The PIN is one you choose yourself, and nobody should ever ask you for either.
Sources
- About two-step verification, WhatsApp Help Center
- Account security tips, WhatsApp Help Center
- 5 Tips to keep your WhatsApp account safe and secure, WhatsApp Help Center
