WhatsApp Rolls Out Multi-Passkey Support Across Platforms

WhatsApp's update permits users to register separate passkeys for iOS and Android devices tied to one account. Management occurs through Settings > Account > Passkeys. The change follows Android rollout in October 2023 and iOS expansion in 2024. Meta simultaneously lengthened two-step verification from six-digit PINs to full alphanumeric passwords with special characters.

Contract records and Meta's public engineering posts show passkey adoption tracked against device-bound authenticators rather than synced cloud keys in the initial phases. Independent telemetry from passwordless authentication vendors indicates cross-device passkey friction remains the primary abandonment point. The added context for unknown calls on Android mirrors patterns seen in prior spam-filtering updates but does not address encrypted call metadata exposure.

Official statements emphasize phishing resistance, yet no independent audit of key attestation or recovery flows has been published. Device-level compromise vectors documented in recent Android and iOS security bulletins continue to bypass passkey protections. Procurement data from major mobile vendors shows persistent investment in hardware attestation, suggesting Meta is aligning with those roadmaps rather than introducing novel controls.

Next milestone will be measured by whether Meta publishes adoption metrics or revocation telemetry within six months.