WhatsApp is developing an optional account password feature to enhance login security, adding a third authentication layer beyond the standard six-digit SMS code and existing two-step verification (2FA). Users can set an alphanumeric password (6-20 characters, requiring at least one letter and one number) in settings, which the app will prompt for during login after the SMS code-or after the 2FA PIN if both are enabled-making unauthorized access significantly harder, even in cases of SIM swapping.

The feature is currently in testing on Android beta version 2.26.7.8 and remains opt-in, with a wider rollout expected after further refinements.