Two-factor authentication (2FA)

WhatsApp Business phone numbers use two-step verification (2FA) — a PIN that protects the number from being registered elsewhere without authorization.

Why partners care

• Registration, migration, and some support flows may require the current 2FA PIN
• Losing the PIN can block number moves until Meta / BSP support processes are followed
• Disabling or resetting 2FA must be done carefully to avoid takeover risk

Practical guidance

• Store the PIN securely when onboarding a customer number
• Only disable 2FA when required for a controlled migration or recovery process
• Prefer completing changes through documented Partner / Meta flows

Related

• Phone numbers
• Embedded Signup
• Coexistence