What's 'username key' that WhatsApp says will add extra layer of protection against scams?

WhatsApp on Thursday said users of its upcoming username feature will be able to enable a "username key", saying it will give users greater control over who can contact them.

The company described the username key as an optional extra layer of protection that users can enable alongside their username.

Anyone trying to message a user through their username will have to know both the username and the username key.

Users can reset the key at any time, effectively preventing new inbound contact through the old key.

The clarification came as WhatsApp answered a series of frequently asked questions on X about the username feature, which is expected to roll out later this year.

The company said usernames are optional and users can continue using WhatsApp without creating one.

It also sought to address concerns that fraudsters could create usernames resembling those of public figures, government agencies or businesses to deceive users.

WhatsApp said usernames linked to existing Instagram and Facebook accounts are reserved for their owners. It has also blocked well-known names and many similar variations, including those of public figures, celebrities, government entities and Meta-verified accounts, so they can only be claimed by legitimate owners.

The platform dismissed claims circulating online that people were already reserving popular usernames, saying only legitimate account owners would be able to secure protected names.

Responding to concerns that anyone could contact a user simply by guessing a username, WhatsApp said usernames, like phone numbers on the platform, will not be searchable.

"The best way to prevent someone from contacting you is to add a username key and to choose a username that is unique to WhatsApp," the company said.

The platform also outlined additional safeguards that will accompany username-based messaging.

When someone sends a message through a username for the first time, WhatsApp said recipients will see contextual information before deciding whether to respond. This will include whether the sender is a new account, whether the two users share any common groups and whether the sender is based in another country.

The company said existing safety measures, including the ability to block and report users, will continue to remain in place.

It also said it will monitor user reports and blocking patterns to detect and act against scammers and accounts exhibiting impersonation or abuse.

WhatsApp said users who want the same username across its platforms can link their WhatsApp account with Instagram or Facebook to verify ownership of the name. Once the username is secured, they can unlink the accounts if they choose.

The company also confirmed that usernames can be changed later, subject to availability.

The clarifications come after the government issued a notice to Meta directing it not to roll out the username feature in India until consultations with the authorities are completed "to the satisfaction of the Government".

The notice expressed concern that the feature could materially increase online fraud, phishing, digital arrest scams and impersonation attacks by enabling bad actors to message victims using deceptive usernames. It also sought a detailed explanation from the company within three days and warned that the feature would be examined under the provisions of the Information Technology Act and the IT Rules.

WhatsApp has maintained that the username feature is intended to improve privacy by allowing users to communicate without sharing their phone numbers, particularly in group chats and conversations with new contacts.