WhatsApp hacked? Do this first—and never share the code.
The first step depends on what you see: an unknown linked device, a forced logout, or a code you did not request.
Never share your WhatsApp registration code. WhatsApp says that re-registering your number with the code signs out other devices using your account.
Still logged in? Remove an unfamiliar device
Open Linked devices in WhatsApp Settings or the app menu. Sign out of any session you do not recognize. The menu location can differ between Android and iPhone.
Logged out? Re-register the same number
Open the official WhatsApp app, choose Log back in, and enter your full phone number if asked. Use the latest six-digit registration code sent by SMS or phone call; if WhatsApp offers a verified-email option for your account, follow the app’s prompt. Re-registering signs out the other devices. WhatsApp says you need the SIM for that same number to recover the account. If you lost it, ask your mobile carrier how to restore the number before trying third-party recovery services.
An unfamiliar two-step PIN or password?
The two-step verification PIN or password is separate from the six-digit registration code. WhatsApp is upgrading the PIN to a stronger password, so the prompt can vary by account. If the app asks for a PIN you do not know, WhatsApp says to wait seven days before trying again. Entering the registration code still logs other devices out.
Only received a code you did not request?
Do not enter it for someone else or send it to anyone. A code arriving by itself does not prove that someone got into your account; someone may have started a registration attempt. If you can still open WhatsApp, check Linked devices. If your phone suddenly loses mobile service too, contact your carrier through its official support channel.
WhatsApp recommends trying account recovery before reporting the account: a report may lead to a ban and loss of access or data. It also says it cannot tell you who accessed the account or when.
After you get back in
If messages or money requests were sent in your name, warn those contacts through another channel. Then review Linked devices and turn on two-step verification. Add a recovery email or set up a passkey if those options are available for your account.
WhatsApp’s security options are rolling out gradually and may differ by account. Recovery instructions checked September 27, 2026.
Sources: WhatsApp Help Center · account recovery · WhatsApp Help Center · linked devices · WhatsApp Help Center · account security · WhatsApp · new account security features.