WhatsApp Two-Step Verification: How to Enable It

Two-step verification adds a PIN that WhatsApp asks for when you register your phone number on a new device. It stops someone else from activating your account on their phone even if they have your SMS code. This guide walks you through enabling it on both iPhone and Android, plus what to do if you forget the PIN.

What You’ll Need

Your phone with WhatsApp installed and logged in
Access to the phone number linked to your WhatsApp account
An email address you can check (optional but strongly recommended for recovery)

Step-by-Step

Open WhatsApp on your phone. Make sure you’re using the latest version from your app store.
Go to Settings. On iPhone, tap the gear icon in the bottom-right corner. On Android, tap the three vertical dots in the top-right corner and select “Settings.”
Tap “Account.” This is usually the first option in the Settings menu.
Tap “Two-step verification.” You’ll see a screen explaining what it does, with a toggle or “Enable” button.
Tap “Enable” or turn on the toggle. WhatsApp will ask you to enter a six-digit PIN.
Enter a six-digit PIN you’ll remember. Avoid obvious sequences like 123456 or your birth year. Use a mix of numbers that only you know.
Confirm the PIN. Type it again exactly as you entered it the first time.
Add an email address (recommended). WhatsApp will ask for an email so you can reset the PIN if you forget it. Enter a valid email and tap “Next” or “Save.”
Confirm the email. WhatsApp will send a confirmation link to that address. Open the email and tap the link to verify.
You’re done. The toggle should now show as enabled. WhatsApp will ask for this PIN whenever you re-register your number on a new phone.

Common Mistakes

Using a simple PIN. 123456, 000000, or your phone number’s last six digits are easy to guess. Pick something random.
Skipping the email. Without an email, if you forget the PIN, you’re locked out for 7 days before you can reset it. That’s a long time without WhatsApp.
Typing the PIN wrong twice. WhatsApp doesn’t lock you out after a few tries, but it does add a delay. After too many wrong attempts, you’ll have to wait longer before trying again.
Forgetting the PIN after enabling. You won’t need it daily, but you will when switching phones. Write it down somewhere safe (not in your phone’s notes app).
Entering a wrong email. A typo in the email means you can’t receive the reset link. Double-check before confirming.

Tips

Use a password manager to store the PIN if you have one. That way you don’t have to remember it.
Keep your email secure. If someone can access your email, they can reset the PIN. Use a strong password and two-factor authentication on that email account.
Update your recovery email if you change email addresses. Go back to Settings > Account > Two-step verification to change it.
Don’t share the PIN with anyone, even friends or family. WhatsApp will never ask for it via message or call.
Enable it on all your devices. WhatsApp Web and Desktop don’t have their own two-step verification; they rely on your phone’s setting, so make sure it’s on your primary device.

Troubleshooting

I forgot my PIN and didn’t add an email. You’ll have to wait 7 days after the last incorrect attempt before you can reset the PIN without email. During that time, you can still use WhatsApp normally, but you can’t disable two-step verification. After 7 days, WhatsApp will let you create a new PIN.

I forgot my PIN but have the email. Go to Settings > Account > Two-step verification, tap “Forgot PIN?” and choose “Reset via email.” WhatsApp will send a link to your recovery email. Click it, then create a new PIN.

I’m not receiving the confirmation email. Check your spam or junk folder. Make sure you entered the email correctly. Wait a few minutes and try again. If it still doesn’t arrive, check that the email address is still active.

I entered the wrong PIN too many times. WhatsApp will temporarily block attempts for a while. Wait at least a few minutes before trying again. Don’t keep guessing randomly, as the wait time increases.

I’m switching phones and WhatsApp asks for the PIN. Enter the PIN you set up. If you don’t remember it, use the “Forgot PIN?” option with your email. If you have neither, you’ll have to wait the 7-day period before you can register your number on the new phone.

Two-step verification is enabled but I never set it up. This can happen if someone else enabled it on your account. If you can still access WhatsApp, go to Settings > Account > Two-step verification and disable it. If you can’t, you may need to wait 7 days to regain control. Contact WhatsApp support if you believe your account was compromised.

Frequently Asked Questions

Q: Does two-step verification protect my chats from being read?
A: No. It only prevents someone from activating your number on a new device. Your chats are still protected by WhatsApp’s end-to-end encryption, but that’s separate from the PIN.

Q: Will I be asked for the PIN every time I open WhatsApp?
A: No. You’ll only be asked when you register your phone number on a new device, like after a factory reset or when installing WhatsApp on a new phone.

Q: Can I change my PIN later?
A: Yes. Go to Settings > Account > Two-step verification, tap “Change PIN,” and enter a new six-digit code.

Q: What happens if I forget the PIN and don’t have the email?
A: You’ll be locked out of registering your number on a new device for 7 days. After that, WhatsApp will let you reset the PIN without email. You can still use WhatsApp on your current phone during that time.

Q: Is two-step verification the same as two-factor authentication?
A: It’s similar but not identical. Two-step verification uses a PIN you set. Two-factor authentication usually combines something you know (PIN) with something you have (a code sent via SMS). WhatsApp’s two-step verification only asks for the PIN during re-registration, not for every login.

Q: Does this work for WhatsApp Business?
A: Yes, WhatsApp Business has the same two-step verification feature in its Settings > Account menu.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →