Big WhatsApp Update! Chat without revealing your phone number — Here's how it will work

WhatsApp will introduce usernames later this year, allowing users to connect with new people without sharing their phone numbers, as the Meta-owned messaging platform expands its privacy features for its more than three billion users.

The company said users can begin reserving their preferred usernames starting this week, ahead of the wider rollout. The feature will be introduced gradually over the coming months, and users will receive a notification when it becomes available in their country.

WhatsApp also announced fresh action against spyware firm NSO Group, saying it has asked a US court to hold the company in contempt for allegedly violating a permanent injunction that bars it from targeting WhatsApp and its users.

Usernames to replace phone number sharing

WhatsApp said usernames are designed to make it easier for people to connect without revealing their phone numbers, especially when interacting with someone for the first time.

The company said sharing a phone number can sometimes feel too personal, particularly when meeting new people, joining community or school groups, or participating in local activities.

Once the feature is launched, users who enable usernames will no longer have to share their phone numbers when sending the first message to another person or business.

Users can reserve a username by going to Settings > Account > Username on the latest version of WhatsApp.

Early reservation and username options

According to WhatsApp, early reservations are being opened because many usernames are likely to overlap among its more than three billion users.

The platform has also introduced a username generator to help users create unique usernames. For creators, small businesses and organisations, WhatsApp will provide an option to claim the same username they already use on Instagram or Facebook, allowing them to maintain a consistent identity across Meta platforms.

Additional privacy controls

WhatsApp said usernames are aimed at strengthening user privacy and will not be searchable through a public directory.

The company said there will be no browsing or username suggestions. People will need to know the exact username to contact someone for the first time.

It has also developed an optional username key, which users can enable to add another layer of control over who can message them using their username.

The company said these measures are intended to give users greater control over who can contact them while reducing the need to share personal phone numbers.

WhatsApp disrupts spyware-linked attacks

Separately, WhatsApp said it recently detected and disrupted spear-phishing attempts linked to NSO Group, an Israeli spyware company that has been blacklisted by the US government.

According to the company, attackers attempted to trick users into clicking on malicious links that redirected them to external websites outside WhatsApp. It also identified and removed test accounts and groups created as part of the campaign.

WhatsApp said it is sharing threat indicators so individuals can check whether they were targeted through phishing attempts across platforms, including WhatsApp, email and text messages.

Legal action and support for anti-spyware efforts

WhatsApp said it has asked a US court to hold NSO Group in contempt for allegedly violating a permanent injunction issued after a court ruled that the company had breached federal and state hacking laws.

The company said spyware poses a national security threat because such tools can target browsers, operating systems and applications beyond WhatsApp.

It said reported targets of commercial spyware have included journalists, government officials, military personnel and humanitarian organisations.

WhatsApp also announced a contribution to the Spyware Accountability Initiative, which supports organisations involved in forensic research, user assistance and advocacy against spyware.

The company reiterated that personal messages and calls on WhatsApp remain protected by default end-to-end encryption. It advised users to keep their apps and devices updated, report suspicious activity and enable stronger account security settings if they believe they could be targets of sophisticated cyberattacks.