WhatsApp Two-Step Verification

Two-step verification adds a PIN to your number, so a stolen SMS code alone can't move your WhatsApp to a new phone.

An error occurred. Please try again.

Lock It Down: Add a PIN That Only You Know to Your Registration

+1 213 555 9876

Live location

Not shared in any chat

Time

November 09, 2026, 15:23

Visible to

Only me

Backup size

Example: 701 MB backup

Sharing off

How Two-Step Verification Works

Open Settings > Account > Two-step verification > Turn on, create a six-digit PIN and confirm it. Add an email address you can open so you can reset the PIN later. After that, anyone registering your number on a new phone needs the PIN as well as the SMS code.

6-Digit Code

Why the SMS code is the master key

The 6-digit code registers your number on a phone. Anyone asking for it, even a friend, is trying to move your account.

+1 (555) 6723-4567

Scam alert: 764676

Verify +1 (555) 622-4567

This code was sent to your number. Enter it only in your own WhatsApp app. Not you?

Never share this code

Password Upgrade

WhatsApp is moving from PIN to password

WhatsApp is upgrading the six-digit PIN to a password. If your app offers the switch, follow its prompts in Settings.

Codes Stay With You

No prize or vote needs your 6-digit code

Messages promising prizes, votes or help in exchange for a 6-digit code or PIN are takeover attempts. Never send them.

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

5F5b2cFV9255fy

Yb9WrnC5nFrvvz

40TLPP4qqQv2tV

Bianca Waller

b.waller@⁠example.com

Keep Settings Safe

Review it every few months

Open Settings > Account > Two-step verification now and then to confirm it is still on and the email is current. If you get an email about resetting two-step verification that you didn't ask for, don't click the link: someone may be trying to register your number. Menu names may vary by app version.

Turn On Two-Step

Forgot the PIN?

Tap Forgot PIN when WhatsApp asks for it and choose Send Email. Open the reset link from the address you added, then return to the app and set a new PIN. Without an email, you wait 7 days from your last successful connection before you can reset it, and WhatsApp can't shorten that.

Code Scams

A common takeover starts with a message from a contact, often an account already hijacked, saying they sent you a 6-digit code by mistake and asking you to forward it. That code registers your number on their phone. Never share it, not even with friends or family. With a PIN on, the code alone is not enough.

See WhatsApp Help

New Phone

Moving to a new phone? Have your PIN ready. WhatsApp asks for it after the SMS code when you register the same number.

Old Number

Got a new SIM and WhatsApp asks for a PIN you never set? The number may have been used before. You can reset it 7 days after registering.

Change PIN

Change the PIN or the email any time in Settings > Account > Two-step verification. Avoid birthdays and your phone unlock code as a PIN.

Unexpected Email

Got a reset email you didn't request? Don't click its link. Someone may be trying to register your number. Your PIN still protects you.

Two-Step Verification Habits That Help

Use an Email

Add a recovery email you can actually open

Without an email, a forgotten PIN means a 7-day wait before you can reset it. Add an address you control in the two-step verification settings and protect that inbox with its own strong password and two-factor sign-in.
Unique PIN

Choose a PIN no one can guess from your life

Skip birthdays, repeated digits and the code that unlocks your phone. Someone who has seen your screen lock or knows your birthday should not be able to guess the PIN that protects your WhatsApp registration.
Keep Secret

No real service will ever ask for your PIN

WhatsApp says to keep your PIN and registration code private, even from friends and family. A message asking for either one, from a stranger, a contact or a so-called support account, is an attempt to take your account.
Remember It

Enter the PIN when WhatsApp asks for it

WhatsApp asks for your PIN from time to time to help you remember it. Enter it instead of skipping. If you notice you no longer remember it, change it while you are still signed in, long before you ever need it.

SEE SAFETY TIPS

Two-Step Questions Answered

Straight Answers About Your WhatsApp PIN

WhatsApp Two-Step Verification

How Two-Step Verification Works

6-Digit Code

Why the SMS code is the master key

Password Upgrade

WhatsApp is moving from PIN to password

Codes Stay With You

No prize or vote needs your 6-digit code

Keep Settings Safe

Review it every few months

Two-Step Verification Habits That Help

Add a recovery email you can actually open

Choose a PIN no one can guess from your life

No real service will ever ask for your PIN

Enter the PIN when WhatsApp asks for it

Two-Step Questions Answered

Read Next

Related security guides