Glossary
What is the WhatsApp two-step verification PIN on a business number?
The 6-digit PIN that protects a WhatsApp Business API number from being re-registered by someone else, when you need it, and the migration case where it must be turned off.
By Broadchat teamPublished 2 min read
Definition
Two-step verification PIN: The two-step verification PIN is a 6-digit code set when a business phone number is registered on the WhatsApp Cloud API. Anyone who later tries to register that number again must enter the PIN, which stops a stranger from taking over the number with a stolen SMS code. It cannot be switched off through the API; that is done in WhatsApp Manager with a confirmation link sent by email.
Also called: Two-factor authentication PIN, 2FA PIN, Registration PIN
How the WhatsApp two-step verification PIN works
Registering a number on the Cloud API involves two proofs. First, a one-time code sent by SMS or voice call shows you control the SIM. Second, the PIN shows you are the business that registered it before. The PIN is set during registration and stays attached to the number.
This protects you against a common attack. If someone tricks a telecom shop into issuing a duplicate SIM, they can receive the SMS code, but without the PIN they still cannot move your business number to their own account.
When the PIN matters
| Situation | What to do with the PIN |
|---|---|
| Normal day-to-day sending | Nothing. Keep it on and stored safely |
| Applying for an Official Business Account | Two-step verification must be on |
| Re-registering the same number | Enter the existing PIN |
| Moving a number to another provider (legacy migration) | Turn two-step verification off first, in WhatsApp Manager |
| PIN forgotten | Disable it from WhatsApp Manager using the email link, then set a new one |
Note that for accounts on Meta's new account model, number migration between partners is not supported; the client shares its WhatsApp account with the new partner instead. Check which case applies before switching anything off.
Example: a forgotten PIN
Arjun set up his bakery's number two years ago with a freelancer, who chose the PIN and kept it. When Arjun moved to a new provider on the legacy migration route, the move stalled because two-step verification was still on. He did not need the freelancer: as an admin of the business portfolio, he opened WhatsApp Manager, requested to disable two-step verification, clicked the link Meta emailed him, and the migration went through. He then set a fresh PIN and saved it in the company password manager, not in a WhatsApp chat.
Two-step verification in Broadchat
Under Channels → All Channels you can set the two-step PIN for one channel or for several channels at once, which helps agencies that onboard many numbers. Keep a record of each client's PIN in a secure vault and share it only with the account owner. For the full onboarding sequence, follow the WhatsApp Business API setup guide; background on the platform is in what the WhatsApp Business API is.
Related terms
Sources
- Two-step verification (Cloud API reference) — Meta for Developers, checked 12 October 2026
- Migrate a phone number to a different WhatsApp Business account — Meta for Developers, checked 12 October 2026
- Official Business Accounts — Meta for Developers, checked 12 October 2026
Broadchat team · Product and partner success team
The people who build and support Broadchat, the white-label WhatsApp Business API platform. We write from what we see while onboarding partners and their clients on the official WhatsApp Cloud API, and we check every article against Meta's current documentation.
Last updated:
Frequently asked questions
Is this the same as two-step verification in my personal WhatsApp?
It is the same idea, a 6-digit PIN that protects re-registration, but for an API number it is set through the registration call or the provider's panel rather than in the phone app's settings.
Can a developer remove the PIN with an API call?
No. Meta does not allow two-step verification to be disabled through the API. An admin must do it in WhatsApp Manager and confirm through the email link.
Should I turn the PIN off to make support easier?
No. Keep it on. Turning it off removes the protection against number takeover, and it is also a requirement for an Official Business Account application.