WhatsApp Expands Passkey Support to Multiple Devices, Bolstering Phishing Resistance

On August 25, 2026, Meta announced a significant enhancement to WhatsApp's account security: support for multiple passkeys per account on both iOS and Android. This update enables users to register more than one passkey, allowing seamless and secure sign-ins across multiple devices. Passkeys, which are phishing-resistant by design, replace traditional passwords with cryptographic credentials tied to the device, mitigating credential theft and phishing attacks.

The announcement highlights that over 1 billion people use a passkey to log into WhatsApp, a figure that underscores the widespread adoption of this authentication method since its initial rollout on Android in October 2023. However, this statistic is reported by Meta and has not been independently verified.

The feature is being rolled out via app updates on iOS and Android. No security vulnerabilities or CVEs are associated with this update; it is a proactive security enhancement rather than a patch for an existing flaw. There are no reports of active exploitation related to this feature.

For organizations and individuals, this update reinforces the importance of adopting phishing-resistant authentication. Users are encouraged to enable passkeys and register them on all their devices to ensure secure access. Administrators should monitor WhatsApp's official channels for rollout details and consider updating internal guidance on secure messaging practices.