When you create a WhatsApp account, you must enter a numeric code sent to you via SMS to verify that the account belongs to you. In the future, if this number is already used on another mobile phoneAccording to WaBetaInfo, you must enter a second verification code before using WhatsApp on that mobile phone.

The function is still in development, but a Additional protection against account theft and that it can be applied to all users compared to the more effective solution of two-step verification, which only protects those who configure it manually.

Steal the accounts, a little harder

Many social networks notify you when someone tries sign in with your account on an unknown device, but this is not the case with WhatsApp. If someone else registers your phone number and somehow receives the verification number you have received via SMS, your account will be disconnected and, without further ado, it will start working on that second person’s mobile phone.

This is because some scammers cheat people out of them. resend verification code, after “accidentally sent to your number”. Those who are deceived and send the code will at least temporarily give their account keys to the attacker: they can always reconfigure WhatsApp later on their phone, but meanwhile the account will be controlled by the attacker.

To protect yourself from such threats, use WhatsApp two-step verification cases where it is necessary to enter an additional PIN before registering the account on a new terminal. According to WaBetaInfo, WhatsApp is now planning a small change to protect everyone from similar situations: a second verification code.

According to WaBetaInfo, when you try to verify your WhatsApp account on a new phone, and already used on another phone, you will be asked for a second verification code, which means you have to wait a certain amount of time before you can get this second code. The message displayed states that “The number XXX is used by WhatsApp on another phone” and adds that the countdown must be waited before sending this second code.

It can be foreseen that some additional text will be displayed in this second code. to remind the user that someone is trying to register their account and if you are not, do not share the text with anyone. Currently, WhatsApp verification messages are pretty harmless and limited to only showing the code and message.

This protection is not yet active for users and should help reduce the incidence of account takeovers with this type of social engineering, but it will have no effect if done by attack. SIM change, because then the attacker gets the codes directly on the copy SIM. Two-step verification is still the only effective protection for such attacks.

via | WaBetaInfo