How to Secure Your WhatsApp Account and Recover It After a Hack in Nigeria

Illustration: phone, linked-device and SIM security symbols.

To secure your WhatsApp account, turn on two-step verification, protect the phone itself, review linked devices and keep registration codes private. If someone takes over the account, re-register the Nigerian phone number in WhatsApp with the six-digit code sent by SMS or call; WhatsApp says this signs the other linked devices out.

People in Nigeria can also contact their mobile network provider quickly if a SIM suddenly loses service. The Nigerian Communications Commission (NCC) identifies SIM-swap fraud as a way criminals can seize control of a phone number and use it to access accounts.

WhatsApp security tips recommend a small set of protections that work together. Open WhatsApp’s settings and switch on two-step verification. Choose a PIN that differs from common dates or repeated numbers, then add a recovery email address you can access.

The PIN adds a second check when someone tries to register your number on another phone. The recovery email gives you a route to reset the PIN if you forget it. WhatsApp also recommends a passkey where the feature is available on your device, alongside the options listed in its security features.

Protect the email account with its own strong password and two-factor authentication. A recovery address helps most when it stays under your control.

Open WhatsApp’s Linked Devices screen and check every computer or browser session, following its account security tips. Log out unfamiliar devices and remove old sessions you have finished using. This review helps you spot access that continues through WhatsApp Web or a desktop app.

Set a screen lock on the phone and use WhatsApp’s app lock or chat lock when available. Keep the operating system and WhatsApp updated through the phone’s official app store. Install the official WhatsApp app; the company warns that unofficial versions can put account and device data at risk.

Review who can add you to groups, and limit that setting to people you know. WhatsApp lists group privacy controls among its safety features. For extra protection, enable end-to-end encrypted backups in WhatsApp settings and store the backup password or key securely.

A WhatsApp registration code arrives by SMS or phone call when a number is being registered. Enter it only in the official app during a registration you started. Friends, callers and messages asking for the code should be treated as a warning sign, even when the request appears to come from someone you know.

Scammers may create urgency by claiming they sent a code by mistake or need help with a competition. Check the request with the person through a separate channel, such as a direct phone call to a number you already know. The UK National Cyber Security Centre explains how phishing messages use links and requests for personal details to steal information in its phishing guidance; its examples help readers recognise similar pressure tactics across messaging apps.

Install or open the official WhatsApp app, enter your phone number and complete the six-digit SMS or voice-call verification. WhatsApp recovery instructions say successful registration logs the other devices out of the account. Keep the SIM or replacement SIM for that same number active so the verification message can reach you.

If WhatsApp asks for an unfamiliar two-step verification PIN, follow the recovery screen. WhatsApp says a user who lacks the PIN may need to wait seven days before signing in; the recovery page explains the timing and the email-reset route.

After you regain access, turn on two-step verification, add a recovery email, inspect Linked Devices and check your profile details. Tell friends and family through another channel that the account was taken over, so they can ignore requests for money or codes sent during the incident. WhatsApp’s recovery guide recommends alerting contacts as part of account recovery.

A sudden loss of service can have several causes, so contact the network provider promptly and ask it to check the SIM and account. The NCC describes SIM-swap fraud as a method that transfers a victim’s phone number to a different SIM. Its consumer guidance advises customers to contact their provider when a phone suddenly loses network service.

Ask the provider how to secure the number and what identification it requires to replace a SIM. Keep the mobile line’s PIN and personal identification details private. If the phone number controls WhatsApp and other accounts, update each account’s security settings after service returns.

The NCC also advises users to protect devices with passwords or PINs, install updates and report mobile-phone fraud in its security FAQ. Its consumer portal lists reporting routes for telecom complaints. For an incident involving a financial account, contact the bank through its official app or published customer-care number as well.

Open WhatsApp settings, choose Account, then Two-step verification and follow the prompts to create a PIN. Add a recovery email address you control so the account has a reset option.

Register your number again in the official WhatsApp app with the six-digit code sent to your phone. Then review linked devices, enable two-step verification and alert contacts through another channel.

A provider outage, SIM fault or SIM-swap attempt can all interrupt service. Ask your mobile operator to check the number and SIM promptly, then secure any accounts tied to that line.

Yes. Open Linked Devices in WhatsApp, select a session and log it out. Review the list regularly, especially after using a shared computer.