Two-Step Verification | Developer Documentation
Two-Step Verification
Updated: Nov 5, 2025
Set up two-step verification for your phone number to add an extra layer of security to your business accounts. To set it up, make a
POST call to /PHONE_NUMBER_ID and attach the parameters below. There is no endpoint to disable two-step verification.| Endpoint | Authentication |
|---|---|
/PHONE_NUMBER_ID(See Get Phone Number ID) | Solution Partners must authenticate themselves with an access token with the whatsapp_business_management and whatsapp_business_messaging permissions. |
Parameters
| Name | Description |
|---|---|
pin | Required. A 6-digit PIN you wish to use for two-step verification. |
Example
Sample request:
curl -X POST \
'https://graph.facebook.com/v25.0/FROM_PHONE_NUMBER_ID' \
-H 'Authorization: Bearer ACCESS_TOKEN' \
-H 'Content-Type: application/json' \
-d '{"pin" : "6_DIGIT_PIN"}'Sample response:
{
"success": true
}All API calls require authentication with access tokens.
Developers can authenticate their API calls with the access token generated in the App Dashboard > WhatsApp > API Setup.
Solution Partners must authenticate themselves with an access token with the
whatsapp_business_messaging and whatsapp_business_management permissions. See System User Access Tokens for information.Reset your PIN
If you forget or misplace your PIN, you can update it by following these steps in WhatsApp Manager:
No comments to display
No comments to display