How to set a WhatsApp two-step verification PIN and email
Add a six digit PIN to your WhatsApp number so a scammer who gets your SMS code still cannot take over your account. Steps and warnings.
Scammers often trick people into sharing the six digit code WhatsApp sends by SMS, then take over the account. A two-step verification PIN adds a second lock, so the code alone is not enough. It takes two minutes. Menu names differ slightly on Samsung, Xiaomi, Vivo, Oppo, Realme and OnePlus phones.
Steps
- Open WhatsApp settings. Open WhatsApp, tap the three dots at the top right, then Settings. On some versions you tap your profile picture or Settings from the bottom bar. Then tap Account.
- Find Two-step verification. Tap Two-step verification, then Turn on or Enable. WhatsApp will explain that it will ask for this PIN when you register your number again, and from time to time to help you remember it.
- Choose a six digit PIN. Enter a six digit PIN, then confirm it. Do not use your birth year, phone number, screen lock or UPI PIN. Pick numbers you can remember and have not used anywhere else.
- Add a recovery email. Add an email address you control and confirm it. This lets you reset the PIN if you forget it. Use an email with its own strong password and 2-step verification.
- Test your knowledge of the PIN. WhatsApp will occasionally ask for the PIN. Enter it from memory so you do not lose it. Never type it into any message, link or caller request, because WhatsApp never asks for it by message.
Menu names differ a little between phone makers and Android versions. If you cannot find a setting, open Settings and use the search box.
Why it matters
WhatsApp account takeover is a very common scam: a stranger or a hacked contact asks you to share a code. Once your account is taken, scammers message your family and friends asking for money. A two-step PIN is a cheap, fast barrier. Without it, one careless reply can cost you the account.
Watch out for
- Never share the six digit SMS code or your PIN with anyone.
- A message from a contact asking for a code may come from a hacked account.
- If you forget the PIN and have no email, you may have to wait seven days.
- Ignore emails or messages claiming WhatsApp needs your PIN to avoid a ban.
How Safeavio helps
Safeavio's Scam check works on messages you paste or share, such as a WhatsApp message asking for a code, and gives reasons in plain words. Money Shield includes a family code word, so a relative asking for money in an emergency can be checked. It does not read your WhatsApp on its own.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions
What if I forget my two-step PIN?
Tap Forgot PIN and WhatsApp will send a reset link to your recovery email. Without a recovery email, you may need to wait seven days. Add the email when you set the PIN.
Does the PIN stop all hacking?
No. It stops takeover by an SMS code alone. You must also guard against linked-device tricks and fake links, so check Linked devices regularly.