New Delhi: WhatsApp is also planning to roll out an account password option that will add a lot of strength to user security. It follows the recent beta release of email-based account recovery by the company, which enables users to recover their accounts in case they cannot receive the usual 6-digit verification code. This comes in handy, especially when one loses temporary access to his or her SIM card.
The messaging platform is now seen to be going a step further with respect to security. As it was revealed in the latest beta version of WhatsApp on Android 2.26.7.8, the company is experimenting with an optional password system that will bring an extra security measure when logging in and attempting to create an account.
WhatsApp exploring dedicated account passwords
WhatsApp has now implemented two-step verification, as users are now required to enter a secondary PIN on top of the 6-digit SMS verification code. This assists in avoiding unauthorised access, particularly when it comes to SIM swapping attacks.
The next password option is an extension of this system. The users will have the ability to make an alphanumeric password in the app settings. The password should have at least one number and one letter with a length ranging between 6 and 20. WhatsApp will also show whether the password that has been selected is secure enough and then confirm it.
Notably, the feature will be optional. The users have the option to enable, change the password, or delete the password.
How the new security layer will work
The password to use in the account will be mandatory once you have entered the normal verification code of 6 digits. Provided that the two-step verification is also on, users will be required to provide their 2FA PIN, after which they will be asked to provide their account password.
This implies that although a person can somehow acquire the SMS verification code, he or she would be subjected to extra security checkpoints. The extra passwording feature makes it a lot harder to gain access as an unauthorised user.
Although there is no extensive evidence of attackers bypassing verification codes and 2FA systems at the same time, the new password system is expected to minimise any possible risk even more.
Rollout timeline
Account password is also a feature that is still in development and has not reached the beta testers. WhatsApp is also polishing the functionality of the system and then making it publicly available.
After testing, it is anticipated that the feature would be introduced in a future update gradually. At the time of launch, it will place more power into the hands of the users when it comes to account security and enhance defence against possible account takeovers.