WhatsApp beefs up security by trialling two-step authentication

The extra layer of security has been rolled out in the latest beta version of the app

It's been a turbulent year for WhatsApp in terms of security and privacy.

Back in April, it switched on end-to-end encryption to much applause and later beat Telegram to the most secure communication app by Amnesty International. But more recently it has been slammed for sharing data with owner Facebook and the practice has even been 'paused' while investigations are carried out.

Read more: WhatsApp now encrypts iCloud back-ups of your conversations

WhatsApp will be hoping, then, that the latest app update for Android will repair some of this damage.

As part of beta version 2.16.346, you will now be able to enable two-step, also known as two-factor, authentication. It isn't switched on by default and is optional, but with two-step verification enabled, any attempt to verify a phone number on WhatsApp has to be accompanied by a six-digit passcode. This prevents people or hackers attempting to access your WhatsApp account by verifying your phone number on another handset. The update was highlighted by Android Police.

You will also have the option to enter your email address when enabling the feature. This will let WhatsApp send a link via email to disable two-step verification in case you forget your passcode, and also to help safeguard your account.

WhatsApp explained: "We do not verify this email address to confirm its accuracy. We highly recommend you provide an accurate email address so that you're not locked out of your account if you forget your passcode.

"If you receive an email to disable two-step verification, but did not request this, do not click on the link. Someone could be attempting to verify your phone number on WhatsApp."

Facebook, Google and Twitter all offer a similar service, which involves sending a text message to an account holder each time they try to login from an unknown device. Apple switched on the security option following the large-scale iCloud hack last year.

How to use two-step authentication on WhatsApp

If you're using the beta app, or when the feature rolls out more widely which is highly likely to happen over the coming months, go to Settings within WhatsApp, open Account, select Two-step verification and Enable. Read more: Europe expresses 'serious concerns' about WhatsApp giving Facebook your number

With two-step verification enabled, you will only be able verify a number on a handset once every seven days if you're attempting to do so without using a passcode.

"Thus, if you forget your own passcode, but did not provide an email to disable two-step verification, even you will not be permitted to reverify on WhatsApp within seven days of last using WhatsApp," added the firm.

After this period, you will be able to reverify on WhatsApp without a passcode but will lose all pending messages upon reverifying.

What's more, WhatsApp warns that "if your number is reverified on WhatsApp after 30 days of last using WhatsApp, and without your passcode, your account will be deleted and a new one will be created upon successfully reverifying."

To help you remember your passcode, WhatsApp will periodically ask you to enter your passcode. There is no option to disable this without disabling the two-step verification feature. You will need this passcode to disable the feature, too.

This article was originally published by WIRED UK