WhatsApp asking for a PIN? Two-step verification explained
In short
- Two-step verification asks for a PIN (WhatsApp is moving to a password) as well as the code, so a stolen code isn’t enough.
- Add an email when you set it up: it’s how you reset a forgotten PIN.
- A new number asking for a PIN you never set? The previous owner turned it on; you can reset it 7 days after you register.
Two-step verification is the best protection against someone taking your WhatsApp with a code they tricked out of you.
How it works
With it on, registering your number on a phone needs a PIN as well as the code. WhatsApp is upgrading the 6-digit PIN to a password. You can turn it on in WhatsApp’s settings, and WhatsApp offers the setup after you register.
Add an email
WhatsApp lets you add and verify an email when you set it up, and recommends it: the email is how you reset the PIN if you forget it. Email codes expire quickly, and only the newest works.
A PIN you never set
If a new number asks for a PIN, its previous owner probably set up two-step verification on their WhatsApp. WhatsApp says you then have to wait seven days after registering before you can reset it. See recycled phone numbers.
Scam emails
If you get emails to reset a PIN or code you didn’t ask for, don’t tap the links: someone may be trying to register your number.
Using a one-time number
WhatsApp needs the number to register again, and a number from ReserveSMS receives codes for 20 minutes only. For a WhatsApp you’ll keep, turn on two-step verification with an email straight away. Get a number for WhatsApp.
Common questions
What is WhatsApp two-step verification?
An extra PIN, being upgraded to a password, that WhatsApp asks for when your number is registered, so a code alone can’t take your account.
I forgot my WhatsApp two-step PIN. What now?
Reset it with the email you added when setting it up. Email codes expire quickly; use the newest.
WhatsApp asks a new number for a PIN I never set. Why?
The previous owner of the number set up two-step verification. WhatsApp says you can reset it seven days after you register.