WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android
Meta announced support for multiple passkeys per WhatsApp account, enabling users with both iOS and Android devices to use phishing-resistant authentication Over 1 billion people now use passkeys to log into WhatsApp, marking a significant adoption milestone Passkey support was initially introduced on Android in October 2023, with iOS support following subsequently The update addresses a key usability gap for users who switch between or own multiple devices
Analysis
TL;DR
- Meta announced support for multiple passkeys per WhatsApp account, enabling users with both iOS and Android devices to use phishing-resistant authentication
- Over 1 billion people now use passkeys to log into WhatsApp, marking a significant adoption milestone
- Passkey support was initially introduced on Android in October 2023, with iOS support following subsequently
- The update addresses a key usability gap for users who switch between or own multiple devices
Why It Matters
This represents a meaningful step forward in consumer-grade phishing-resistant authentication at scale, bringing enterprise-grade security practices to over a billion WhatsApp users. For AI and security practitioners, it demonstrates the growing maturity and adoption of passkey technology as a viable alternative to traditional passwords across mainstream consumer platforms.
Technical Details
- Multiple passkeys can now be registered to a single WhatsApp account, allowing cross-platform authentication on both iOS and Android devices
- Passkeys rely on public-key cryptography, making them inherently resistant to phishing attacks since the private key never leaves the user's device
- The feature builds on the WebAuthn/FIDO2 standards that underpin passkey technology
- Initial Android passkey support launched in October 2023, with subsequent iOS integration bringing the total to over 1 billion passkey users
Industry Insight
- The widespread adoption of passkeys by WhatsApp signals that phishing-resistant authentication is moving from niche to mainstream, likely accelerating industry-wide adoption across messaging and social platforms
- Multi-device passkey support addresses a critical friction point that previously limited passkey adoption among users who own multiple devices, suggesting this pattern will become a standard expectation
- Security teams should monitor passkey adoption trends as an indicator of shifting user expectations around authentication, and consider passkey integration in their own product roadmaps
Disclaimer: The above content is generated by AI and is for reference only.