BENTECH

Complete WhatsApp Security and Account Hardening

Master WhatsApp account security by setting up two-step verification, adding recovery emails, and implementing biometric passkeys to block unauthorized account takeovers.

This hands-on course teaches essential security configurations within WhatsApp to protect your personal account from hacking and unauthorized registration. Learners will discover how to activate two-step verification PINs, link recovery emails, and configure device-level passkeys.

Section 1: Account Defense Configuration

Implement multi-layered defense mechanisms on WhatsApp using two-step verification, recovery emails, and passkeys.

Lesson 1.1: Activating Two-Step Verification PIN

  • Accessing WhatsApp Account Settings
  • Enabling Two-Step Verification
  • Setting a 6-Digit PIN

Two-step verification is an essential defense layer against SIM-swapping and unauthorized account registration on WhatsApp. When enabled, anyone attempting to activate WhatsApp with your phone number must supply the six-digit PIN you created. To activate this feature, tap the three vertical dots in the upper right-hand corner of the main WhatsApp interface. Select 'Settings', then tap 'Account', followed by 'Two-step verification'. Tap 'Turn on', then input your chosen 6-digit PIN and confirm it. Notice that the operating system blacks out the PIN entry screen during video recordings or screen sharing; this built-in operating system security policy prevents screen capture tools from stealing secret credentials.

Practical work

  1. Open WhatsApp on your mobile device and navigate to Settings > Account > Two-step verification.
  2. Tap 'Turn on' and choose a secure, non-trivial 6-digit numeric PIN.
  3. Confirm the PIN and ensure the status displays 'Two-step verification is on'.

Lesson 1.2: Linking Recovery Email and Configuring Passkeys

  • Configuring an Account Email Address
  • Email Verification Process
  • Understanding and Setting Up Passkeys

While a two-step verification PIN provides strong protection, forgetting it could lock you out of your account. WhatsApp solves this problem by allowing users to associate an email address with their account. Navigate to Settings > Account > Email address, enter your active email, and submit the verification code sent to your inbox. This ensures that you can reset your PIN safely if needed. In addition to PINs and emails, WhatsApp supports modern Passkeys. Passkeys rely on FIDO standards, replacing passwords with the same biometric or lock screen credentials you use to unlock your phone or computer (such as fingerprint, face recognition, or lock pattern). To configure a passkey, select Settings > Account > Passkeys, tap 'Create passkey', and confirm using your device's biometric prompt or lock screen passcode. This setup ensures seamless, phishing-resistant logins across your devices.

Practical work

  1. Navigate to Settings > Account > Email address and enter your personal email address.
  2. Verify the email address by inputting the verification code sent by WhatsApp.
  3. Go to Settings > Account > Passkeys and tap 'Create passkey'.
  4. Authenticate with your device's fingerprint, face ID, or screen lock to finalize passkey creation.