As digital communication grows ever more entangled with daily life, the question of who is truly on the other end of a call or message has become one of the defining anxieties of our connected age. WhatsApp, serving over two billion people worldwide, has responded with a quiet but meaningful set of upgrades: new context for unknown callers on Android, and expanded account security tools—including full passwords and support for multiple passkeys—that nudge users toward a future where remembered passwords may no longer be necessary. These changes arrive not as dramatic reinvention, but as a cons
WhatsApp Upgrades Spam Protection and Security With Caller Info and Passkeys
Better information makes the judgment call faster
Mark
So WhatsApp is basically trying to solve two different problems at once here—spam calls and account security. Are they connected, or just two separate announcements bundled together?
Mimi
They're separate issues, but they both come from the same place: WhatsApp's scale and the fact that it's become a target. Spam callers want access to your contact list. Account hijackers want to impersonate you. These features address both angles.
Luke
The caller-info feature only works on Android right now, though. We should be clear about that. iOS users don't get the country-of-origin and mutual-group information yet.
Mark
Why the delay on iOS?
Mimi
The source doesn't say. Could be technical, could be Apple's app review process, could be prioritization. But it's worth noting that Android is getting the feature first.
Luke
And on the passkey side—a billion users have set one up, which sounds huge, but that's adoption over time. We don't know how many of those billion are active, or how many people have actually set up *multiple* passkeys like the new feature allows.
Mark
So the passkey thing is more about giving people options if they want them, rather than forcing everyone into a new system.
Mimi
Exactly. You can still use a password for two-factor auth if you want. The passkeys are there if you prefer them, and now you can have more than one—maybe one on your phone and one on a tablet, for instance.
Luke
The source material is pretty thin on the actual rollout timeline and whether these are available to everyone today or rolling out gradually.
Mark
Does that matter much? I mean, if it's starting today, it's starting today.
Luke
It matters if you're an Android user who doesn't see the feature yet. "Starting today" could mean a phased rollout over weeks. The reporting doesn't clarify that.
The Pulse
- Spam and scam calls have grown so relentless that billions of users now reflexively ignore unknown numbers—a silence that costs legitimate connections and signals a broken system.
- WhatsApp's new Android feature surfaces a caller's country of origin and any shared group chats before you answer, giving users a fighting chance to distinguish a stranger from a scammer.
- On the security front, the expansion of two-factor authentication to include full passwords and multiple passkeys closes gaps that have long left accounts vulnerable to phishing and impersonation.
- With over a billion users already enrolled in passkeys, the industry's slow march away from traditional passwords is accelerating into something closer to a sprint.
- For an app whose end-to-end encryption prevents server-side spam filtering, these user-facing tools represent a pragmatic redistribution of responsibility—putting sharper instruments directly in users' hands.
As digital communication grows ever more entangled with daily life, the question of who is truly on the other end of a call or message has become one of the defining anxieties of our connected age. WhatsApp, serving over two billion people worldwide, has responded with a quiet but meaningful set of upgrades: new context for unknown callers on Android, and expanded account security tools—including full passwords and support for multiple passkeys—that nudge users toward a future where remembered passwords may no longer be necessary. These changes arrive not as dramatic reinvention, but as a considered acknowledgment that safety, at scale, is built from small, practical decisions.
WhatsApp is rolling out two sets of upgrades designed to make the app safer and quieter. The first targets the exhausting problem of unknown callers: Android users will now see a caller's country of origin and whether they share any group chats with that person before deciding whether to answer. It's a modest addition, but in a world where spam calls have become so relentless that many people simply stop picking up, even a small signal can change the calculation.
The second set of changes goes deeper into account security. WhatsApp is expanding its two-factor authentication to include full passwords, and—more significantly—now allows users to store multiple passkeys on both Android and iOS. Passkeys replace traditional passwords with cryptographic keys stored on the device itself, making them far harder to phish and impossible to reuse across services. The company reports that more than a billion users have already set up at least one passkey, a figure that speaks to how quickly the technology is taking hold.
The timing reflects a broader industry shift. Tech companies have been edging away from password-dependent systems for years, but momentum has recently sharpened. For WhatsApp specifically, the stakes are high: a compromised account doesn't just expose private messages—it hands an attacker a ready-made identity to use against an entire contact list.
Because WhatsApp's end-to-end encryption prevents the company from filtering spam at the server level, the burden of protection falls increasingly on users themselves. These new features—better caller context, stronger authentication options—are a practical answer to that constraint, equipping people with clearer information and finer control at the moments that matter most.
WhatsApp is rolling out a pair of upgrades aimed at making the app safer and less cluttered with unwanted calls. The first targets a persistent annoyance: unknown numbers. Starting now, Android users will see additional context before picking up a call from someone not in their contacts. The app will display which country the number originates from and whether you share any group chats with the caller—two pieces of information that can help you decide whether to answer or send it to voicemail. It's a small but practical addition to the spam-filtering arsenal that most people carry in their pocket.
The second set of changes addresses account security more directly. WhatsApp is expanding its two-factor authentication system to include full passwords alongside the existing options. More significantly, the company is now allowing users to store multiple passkeys on both Android and iOS devices. Passkeys represent a shift away from traditional passwords—they use cryptographic keys stored on your device rather than a string of characters you have to remember or manage. The company says more than a billion people have already set up at least one passkey to access WhatsApp, a figure that underscores how quickly the technology is gaining traction across the user base.
These moves reflect broader industry momentum. Tech companies have been gradually moving away from password-dependent authentication for years, but the pace has accelerated recently. Passkeys offer genuine security advantages: they're harder to phish, they can't be reused across services, and they eliminate the friction of password recovery. For WhatsApp, which handles sensitive communications for more than two billion monthly active users, the stakes around account security are substantial. A compromised account doesn't just expose messages—it can be used to impersonate someone to their entire contact list.
The Android caller-info feature addresses a different but equally real problem. Spam and scam calls have become so prevalent that many people simply don't answer unknown numbers anymore. By providing context—especially the geographic origin and mutual connections—WhatsApp gives users a faster way to make that judgment call. Someone calling from a country you've never contacted, with no mutual groups, is more likely to be spam than a legitimate contact trying to reach you through the app.
These features arrive as messaging apps face increasing pressure to balance openness with safety. WhatsApp's end-to-end encryption means the company itself cannot read messages, which is a privacy feature but also means WhatsApp has limited ability to filter spam at the server level. Shifting more of that responsibility to the user—by providing better information and stronger account controls—is a practical response to that constraint. The passkey expansion and two-factor password option give users more granular control over who can access their account, while the caller-info feature puts better tools in their hands for deciding which calls to engage with in the first place.
Want the full story?
Read the original at The Verge ↗
Technology