Deepak Gupta

WhatsApp asks for a PIN or password you never set

Use WhatsApp's "Can't remember password" steps. Entering your 6-digit SMS code already logged the other person out, even without the PIN. If you cannot verify another way, WhatsApp says to wait 7 days and try again, then use Reset account. Never share any code while you wait.

Do these 3 things now

1Open WhatsApp's reset steps. Try Verify another way first in case an email or SMS option works for you.Read to them:“Open WhatsApp's reset steps. Try Verify another way first in case an email or SMS option works for you.”
2Do not reply to anyone offering to unlock your account or skip the wait.Read to them:“Do not reply to anyone offering to unlock your account or skip the wait.”
3Keep your SIM in your phone and warn your contacts while you wait.Read to them:“Keep your SIM in your phone and warn your contacts while you wait.”

Open WhatsApp's reset steps

Official link: faq.whatsapp.com

I am helping someone else

Helper mode: each step is written for you to read aloud. Let them tap and type on their own device; never ask them to send you a code. Send them this first.

01Is this you?

You entered the 6-digit SMS code and WhatsApp now asks for a two-step verification PIN or password.
You never set a PIN or password, or you do not remember one.

Not quite? Someone else is logged in and you have not re-registered yet · Your phone was lost or stolen · Your phone shows no service

02Official recovery path

Know that entering the 6-digit SMS code already logged out anyone using your account, whether you know the PIN or not.Read to them:“Know that entering the 6-digit SMS code already logged out anyone using your account, whether you know the PIN or not.”source
On the two-step verification screen, tap Verify another way.Read to them:“On the two-step verification screen, tap Verify another way.”source
Select email, SMS, or Voice call, tap Continue, and enter the code you receive.Read to them:“Select email, SMS, or Voice call, tap Continue, and enter the code you receive.”source
If none of those work, wait. The option to reset your account unlocks after the wait.Read to them:“If none of those work, wait. The option to reset your account unlocks after the wait.”source
When it unlocks, tap Verify another way > See more, then Reset account > Continue > Reset account > Reset account. This cannot be undone.Read to them:“When it unlocks, tap Verify another way > See more, then Reset account > Continue > Reset account > Reset account. This cannot be undone.”source
Turn on two-step verification: tap You > Account > Two-step verification, then toggle on Turn on two-step verification. Create a password and add an email you can access.Read to them:“Turn on two-step verification: tap You > Account > Two-step verification, then toggle on Turn on two-step verification. Create a password and add an email you can access.”iPhonesource
Turn on two-step verification: open Settings > Account > Two-step verification, then toggle on Turn on two-step verification. Create a password and add an email you can access.Read to them:“Turn on two-step verification: open Settings > Account > Two-step verification, then toggle on Turn on two-step verification. Create a password and add an email you can access.”Androidsource
Check Linked Devices. Tap any device you do not recognize, then tap Log Out.Read to them:“Check Linked Devices. Tap any device you do not recognize, then tap Log Out.”source

Did that get you back in?

Yes

Lock it down now. Change the password, turn on two-step, sign out other devices. It takes about 15 minutes.

No

A.If you just got this number from your carrier, the previous owner may have set two-step verification. WhatsApp says you will need to wait a few days before resetting access.Read to them:“If you just got this number from your carrier, the previous owner may have set two-step verification. WhatsApp says you will need to wait a few days before resetting access.”source
B.If you lose service during the wait, call your carrier. You need a SIM with the same number to finish.Read to them:“If you lose service during the wait, call your carrier. You need a SIM with the same number to finish.”source

Then: how long it takes

03How long it takes

Published by the platform

WhatsApp's compromised-account page says to wait 7 days and try again if you do not have the PIN. Its reset page says the reset option unlocks "after a few days".

While you wait

Keep your SIM in your phone and keep it charged and with you.
Do not share any code that arrives, from anyone, for any reason.
Warn your contacts by SMS, a call, or another app.
Ask your carrier whether anyone requested a SIM change on your number.

04Warn your contacts

Send this from another account or by text, so nobody falls for messages sent in your name.

My WhatsApp was taken over. If my number messages you asking for money, a code, or a link, it is not me. Please do not send anything or share any code. I will tell you when I have my account back.

More templates: email, followers, customers

05Watch out for recovery scams

People who just lost an account are the main target of fake helpers. Only WhatsApp's own app or website can restore your account.

Anyone who says they can remove the 7-day wait or unlock the PIN for a fee. WhatsApp's help pages describe no way to skip it. How it works
Fake "WhatsApp Support" accounts or callers who offer to restore your account. Only use help pages on whatsapp.com. How it works
A friend's account asking for a code "sent to you by mistake". That code is your WhatsApp registration code. How it works

All recovery scams and how to spot them

06Once you're back in: lock it down

0 of 9 doneAbout 19 minutes total

Turn on two-step verification with a password and email3 minOn Android, open Settings > Account > Two-step verification. On iPhone, tap You > Account > Two-step verification. Toggle on Turn on two-step verification, create a strong password, then add an email address you can access and tap Next. WhatsApp is replacing the old 6-digit PIN with a password, so set a password if you still have a PIN.source
Add and verify a recovery email2 minOpen Settings > Account > Email address > Add email (on iPhone, start from You). Enter the code WhatsApp sends to your inbox and tap Verify. A verified email lets you get a registration code without SMS. Use an email account that has its own strong protection.source
Create a passkey2 minOpen Settings > Account > Passkeys, then follow the prompts (on Android, tap Create passkey > Continue). A passkey uses your phone's fingerprint, face, or screen lock, so you can verify yourself without an SMS code. You need Android 9 or later with a password manager, or an iPhone 8 or later on iOS 16 or later.source
Log out devices you do not recognize2 minOpen Linked Devices (on iPhone, from Settings or your profile picture; on Android, from the menu). Tap any device you do not recognize, then tap Log Out. Repeat for each one. WhatsApp Web sessions show up here.source
Limit who can add you to groups1 minOpen Settings > Privacy > Groups and choose My contacts or My contacts except.... By default anyone with your number can add you to a group, which is how many scam groups reach people.source
Hide your profile from strangers2 minOpen Settings > Privacy and set Last seen, Profile photo, About, and Status to My contacts or Nobody. Scammers use your photo and name to pose as you. You can also turn on Silence unknown callers under Privacy > Calls.source
Turn on security notifications1 minOpen Settings > Account > Security notifications and turn on the setting to show them on this device. You will see a notice when a contact's security code changes, which happens when they move to a new phone. If that contact then asks you for money or a code, check with them another way first.source
Protect your SIM with your carrier5 minYour WhatsApp account follows your phone number. Ask your carrier for a SIM PIN or a port-out or number-lock protection so no one can move your number to their SIM. See the SIM-swap guide for what to ask for.Unconfirmed, test pending
Never share your WhatsApp code1 minNever share your 6-digit registration code or your password with anyone, not even friends or family. Anyone who asks for it, for any reason, is trying to take your account.source

Then do the 24-hour cleanup.

Free toolExposure CheckSee what of yours is already public.Free toolPassword Breach CheckCheck if a password shows up in known leaks.ReadHow to set up two-factor on all your accounts

07How it probably happened

Most likely
The person who took your account set a PIN so you could not take it back
How this scam works
Also common
You shared a code after a text or call asked for it
How this scam works
Less common
You have a recycled number and the previous owner set two-step verification

Account taken, recovery details swapped

08Report it

About reporting and blocking on WhatsApp

Lost money, being blackmailed, or someone is using your account to scam others? Report it to your country's cybercrime service too. If you are in danger, call your local emergency number.

United States

FBI Internet Crime Complaint Center (IC3)Report online crime, including account takeovers that led to money loss or extortion. The IC3 never contacts you first and never asks for money.
FTC ReportFraudReport the scam to the Federal Trade Commission.
IdentityTheft.govUse it if someone used your Social Security number or opened accounts in your name. You get a recovery plan.

United Kingdom

Report Fraud (England, Wales and Northern Ireland)Run by the City of London Police. It replaced Action Fraud on 4 December 2025. In Scotland, call Police Scotland on 101 instead.
Forward scam texts to 7726Free on most UK networks. Your provider can look into the sender and block it.
Report a scam email to the NCSCForward the email to report@phishing.gov.uk before you delete it.
Report Fraud: 0300 123 2040England, Wales and Northern Ireland. In Scotland, call Police Scotland on 101.

India

National Cyber Crime Reporting PortalRun by the Indian Cyber Crime Coordination Centre (I4C), Ministry of Home Affairs. Reports go to state and UT police.
Chakshu on Sanchar SaathiReport suspected fraud calls, SMS or WhatsApp messages to the Department of Telecommunications. It is not for money already lost: call 1930 for that.
National Cyber Crime Helpline: 1930Toll free, 24 hours. Call fast if money left your account: it can help freeze the transfer.

Canada

Canadian Anti-Fraud Centre: report onlineVictims and witnesses can report fraud or cybercrime online. Also contact your local police as soon as you can.
Canadian Anti-Fraud Centre: 1-888-495-8501Toll free. The CAFC does not contact people to ask for money.

Australia

ReportCyberReport cybercrime to police. Your report may go to your state or territory police or the AFP.
ScamwatchReport a scam, even if you lost no money. The AFP also points people worried about identity theft to IDCARE, a free support service.
ReportCyber phone line: 1300 292 371Report concerns about cybercrime or cyber security incidents. If life is at risk, call 000.

09Questions people ask

Is the other person still in my account?

No. WhatsApp says anyone using your account is logged out after you enter the 6-digit SMS code, whether you know the PIN or not.

How long do I have to wait?

WhatsApp's recovery page says to wait 7 days and try again. Its reset page says the reset option unlocks after a few days.

Will I lose my messages if I reset?

WhatsApp says if it has been less than 30 days since you last logged in, resetting deletes messages received since then, and your profile stays. After more than 30 days, your messages and profile are deleted.

Why does WhatsApp say password, not PIN?

WhatsApp is replacing the 6-digit two-step verification PIN with a password. Older accounts may still see a PIN.

Can I use my email to skip the wait?

If an email is on the account and you can reach it, tap Verify another way and choose email.

Sources and last check

Last verified: October 16, 2026. Steps checked against the platform's own help pages listed below. Device testing is ongoing; steps marked unconfirmed are still waiting for it.

Can't remember password (read 2026-10-16)
How to recover a compromised account (read 2026-10-16)
About registration and two-step verification (read 2026-10-16)
How to manage two-step verification settings (read 2026-10-16)
How to check devices linked to your account and unlink a device you don't recognize (read 2026-10-16)
How to recover a WhatsApp account from a lost or stolen device (read 2026-10-16)

Wrong step or changed screen? Report it. Never include passwords or codes.