How do you turn on two-step verification in WhatsApp?

Lock down your WhatsApp account in about 15 minutes with a 6-digit PIN, an email backup, and tighter privacy settings.

Nasıl Yapabilir? Editör EkibiPublished: September 14, 2026Updated: September 15, 20266 min readShare:X WA

Mutfak masasında telefonunun ayarlarına bakan bir kadın; yanında çay bardağı, not defteri ve kalem var.

Short answer

Open WhatsApp and go to Settings > Account > Two-step verification > Turn on. Choose a 6-digit PIN, enter it again to confirm, then add an email address for recovery. In the same Settings menu, open Privacy and set Last seen, Profile photo, and Groups to "My contacts". The whole thing takes 10 to 15 minutes.

What you need

→The current version of WhatsApp (update it from Google Play or the App Store)

→A working internet connection (Wi-Fi or mobile data)

→An email address you can actually open (Gmail, Outlook, and so on)

→A 6-digit number you will remember but others cannot guess

→A safe place to store the PIN (a password manager or a locked note)

Step by step

Update the app

Search for WhatsApp in the Google Play Store or App Store and tap "Update" if it appears. Menu names shift between versions, and on the current release the labels match this guide exactly. The update takes a minute or two.

Open the Settings menu

On Android, tap the three dots in the top right and choose "Settings". On iPhone, tap the "Settings" tab in the bottom bar. On the screen that opens you will see Account, Privacy, Chats, and Notifications listed under your name.

Turn on two-step verification

Follow "Account" > "Two-step verification" > "Turn on" (some versions say "Enable"). Enter your 6-digit PIN, then enter it a second time to confirm. Avoid guessable numbers such as your birth date, 123456, or the last six digits of your phone number.

Add the recovery email

On the screen that appears after you confirm the PIN, type your email address and tap "Next" and "Save". This address is the only way to reset a forgotten PIN; skip it and you will be locked out for 7 days. Double-check it for typos.

Tighten your privacy settings

In Settings > "Privacy", open Last seen and online, Profile photo, Status, and About one by one and select "My contacts". Do the same on the "Groups" row so numbers you do not know cannot add you to a group.

Clear out linked devices

Go to Settings > "Linked devices" and review the sessions in the list. If you see a computer or browser you do not recognise, tap it and choose "Log out". Repeating this check once a month takes about 30 seconds.

Switch on the screen lock

Open Settings > Privacy > "Screen lock" (called "Screen Lock" on iPhone and "Fingerprint lock" on Android). Once it is on, anyone holding your phone needs your fingerprint or face to open your chats. Set the timeout to "Immediately".

Test the setup

Close WhatsApp, reopen it, and check that Settings > Account > Two-step verification shows "On". If the "Change email address" option displays the correct address, your recovery backup is saved properly.

Ad — in-article responsive

Tips

→WhatsApp will occasionally ask for your PIN when you open the app. That is not a bug, just a reminder so the number stays in your memory.

→Encrypt your chat backup too: Settings > Chats > Chat backup > End-to-end encrypted backup protects the copy stored in Google Drive or iCloud.

→Protect your recovery email account with its own two-step verification, otherwise it becomes the weakest link in the chain.

→Never reply to a "share your code" message from an unknown number. WhatsApp will never ask you to pass your verification code to anyone.

→Settings > Privacy > Advanced holds options to hide your IP address and disable link previews for extra privacy.

Watch out

Skipping the recovery email is the most common mistake. If you forget your PIN and no email is on file, WhatsApp will not let you back into your account for 7 days, and when the account resets after that period, pending messages and group memberships can be lost. Make sure there are no typos when you enter the address.

Frequently asked questions

+I forgot my PIN. What can I do?

Tap the "Forgot PIN" link on the two-step verification screen and a reset link is sent to your registered email address. If no email is registered, you have to wait 7 days.

+Does two-step verification ask for a code on every message?

No. The PIN is only requested when you register your number on a new phone, plus the occasional reminder. It has no effect on day-to-day messaging.

+Do I need the PIN when moving my number to a new phone?

Yes. After the 6-digit code that arrives by SMS, you are also asked for the PIN you chose. Setup cannot finish without it, so confirm you remember it before you switch phones.

+If I hide my last seen, can I still see other people's?

No. When you hide your own last seen, you also lose the ability to see other people's last seen. The rule works both ways.

+Can I turn two-step verification off later?

Yes, you can remove it with Settings > Account > Two-step verification > "Turn off". Leaving it on is still recommended as protection against SIM-swap scams.

Sources and verification

Last verified: September 15, 2026. tell us. Menu labels follow WhatsApp's English interface; they may read slightly differently on older app versions or other language settings.

This content is for information only; for official procedures the relevant institution’s current announcements take precedence. Details: disclaimer.

Nasıl Yapabilir? Editör Ekibi

Resmî kaynaklara dayanan, Türkiye için yazılmış adım adım rehberler. Our editorial principles →