Turn on two-step verification
The one setting that makes a stolen code useless on its own.
Two-step verification adds a PIN that you choose. Even with your 6-digit code, nobody can move your account without it.
On your phone
On Android
- Open WhatsApp and tap the three dots, then Settings.
- Tap Account, then Two-step verification.
- Tap Turn on and choose a 6-digit PIN you will remember. It is not your registration code.
- Add an email address. This is how you reset the PIN if you forget it, and without it a forgotten PIN locks you out for days.
On your phone
Two more worth doing
- Settings, Privacy, then set Profile photo and Last seen to My contacts. A stranger who cannot see your photo has less to impersonate you with.
- Settings, Linked devices. Look at the list. Log out anything you do not recognise.