I have a confession. For years I was one of those people who treated two-step verification like flossing. I knew I should do it, I told everyone else to do it, and somehow I kept putting it off myself. The six-digit PIN system WhatsApp uses right now? Fine in theory. In practice my cousin called me last month in a complete panic because she'd forgotten hers and got locked out of her account for two days.

So when I saw that WhatsApp is working on a replacement for the six-digit PIN, my ears perked up. The report says the messaging app is developing a new verification method that would move away from those number strings we all keep filing under "something I'll remember later."

Details are still thin, which I actually take as a good sign. It means they're cooking, not rushing. But the direction makes sense if you've watched security evolve over the years. I remember when a four-digit phone unlock code felt like Fort Knox. Then we got fingerprints, then face recognition, and now most of us barely think about unlocking our phones at all. The biometrics just handle it quietly in the background, like a good lock on a screen door.

That's the sweet spot for security. When it becomes invisible.

The problem with PINs has always been human nature. We pick birthdays. We pick 123456. We pick something meaningful that a determined person could guess with five minutes of scrolling your social media. Or we pick something genuinely random, write it on a sticky note, and lose the sticky note. My cousin Donna, God love her, used her childhood street address. She hasn't lived there since 1994.

Whatever WhatsApp lands on, and I suspect we'll see it roll out in beta first before a wider release, I hope it reduces friction rather than adding layers. Technology should work for you. Every extra step between you and your messages is another moment you're tempted to just skip the protection entirely.

Marcus would probably want to know the specific cryptographic details of how the new method authenticates. I'm more interested in whether my mother can set it up without calling me. Both questions matter.

If you're using a six-digit PIN on WhatsApp right now, good for you. Keep it until the new system arrives. And if you're not using two-step verification at all, please go turn it on today. Whatever is coming next, the protection you have today is infinitely better than nothing.

I'll keep watching this one as more details surface. In the meantime, maybe write that PIN down somewhere safe... somewhere that isn't a sticky note on your monitor.