Deepak Gupta

Lock down your WhatsApp account

9 settings, about 19 minutes. Do them in order: each one closes a door attackers use. Your ticks stay in this browser only.

0 of 9 doneAbout 19 minutes total

Turn on two-step verification with a password and email3 minOn Android, open Settings > Account > Two-step verification. On iPhone, tap You > Account > Two-step verification. Toggle on Turn on two-step verification, create a strong password, then add an email address you can access and tap Next. WhatsApp is replacing the old 6-digit PIN with a password, so set a password if you still have a PIN.source
Add and verify a recovery email2 minOpen Settings > Account > Email address > Add email (on iPhone, start from You). Enter the code WhatsApp sends to your inbox and tap Verify. A verified email lets you get a registration code without SMS. Use an email account that has its own strong protection.source
Create a passkey2 minOpen Settings > Account > Passkeys, then follow the prompts (on Android, tap Create passkey > Continue). A passkey uses your phone's fingerprint, face, or screen lock, so you can verify yourself without an SMS code. You need Android 9 or later with a password manager, or an iPhone 8 or later on iOS 16 or later.source
Log out devices you do not recognize2 minOpen Linked Devices (on iPhone, from Settings or your profile picture; on Android, from the menu). Tap any device you do not recognize, then tap Log Out. Repeat for each one. WhatsApp Web sessions show up here.source
Limit who can add you to groups1 minOpen Settings > Privacy > Groups and choose My contacts or My contacts except.... By default anyone with your number can add you to a group, which is how many scam groups reach people.source
Hide your profile from strangers2 minOpen Settings > Privacy and set Last seen, Profile photo, About, and Status to My contacts or Nobody. Scammers use your photo and name to pose as you. You can also turn on Silence unknown callers under Privacy > Calls.source
Turn on security notifications1 minOpen Settings > Account > Security notifications and turn on the setting to show them on this device. You will see a notice when a contact's security code changes, which happens when they move to a new phone. If that contact then asks you for money or a code, check with them another way first.source
Protect your SIM with your carrier5 minYour WhatsApp account follows your phone number. Ask your carrier for a SIM PIN or a port-out or number-lock protection so no one can move your number to their SIM. See the SIM-swap guide for what to ask for.Unconfirmed, test pending
Never share your WhatsApp code1 minNever share your 6-digit registration code or your password with anyone, not even friends or family. Anyone who asks for it, for any reason, is trying to take your account.source

Then

Write down where your recovery details live in the recovery kit, so a future lockout takes minutes, not weeks.

Free toolExposure CheckSee what of yours is already public.Free toolPassword Breach CheckCheck if a password shows up in known leaks.ReadHow to set up two-factor on all your accounts ReadPasskeys vs passwords

Comparing password managers or security keys? See the independent tool comparisons.

Sources and last check

Last verified: October 16, 2026. Steps checked against the platform's own help pages listed below. Device testing is ongoing; steps marked unconfirmed are still waiting for it.

How to recover a compromised account (read 2026-10-16)
How to recover a WhatsApp account from a lost or stolen device (read 2026-10-16)
Can't remember password (read 2026-10-16)
About registration and two-step verification (read 2026-10-16)
How to manage two-step verification settings (read 2026-10-16)
About two-step verification (read 2026-10-16)
About passwords (read 2026-10-16)
Create a passkey (read 2026-10-16)
About passkeys (read 2026-10-16)
Add your email to your WhatsApp account (read 2026-10-16)
How to check devices linked to your account and unlink a device you don't recognize (read 2026-10-16)
Account security tips (read 2026-10-16)
Received verification code without requesting it (read 2026-10-16)
Seeing "Your phone number was registered with WhatsApp on a new device" (read 2026-10-16)
How to register your phone number (read 2026-10-16)
How to change group privacy settings (read 2026-10-16)
How to change your privacy settings (read 2026-10-16)
About security code change notifications (read 2026-10-16)
About reporting and blocking on WhatsApp (read 2026-10-16)
How to stay safe on WhatsApp (read 2026-10-16)
Contact WhatsApp (read 2026-10-16)

Wrong step or changed screen? Report it. Never include passwords or codes.