# Forgot Your WhatsApp PIN? How to Reset Two-Step Verification > Forgot your WhatsApp two-step verification PIN? Use Verify another way for an email or SMS code, or wait for Reset account. What each route costs you. - URL: https://www.awarexone.com/research/whatsapp-two-step-pin-reset - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-09-29 - Topics: WhatsApp, Account recovery, Malaysia - Related service: WhatsApp account recovery: https://www.awarexone.com/social-media-recovery/whatsapp-account-recovery ## Short answer On the PIN screen, tap Verify another way and choose email, SMS or voice call to get a code instead. If none of those work, WhatsApp unlocks a Reset account option after a waiting period that nobody can shorten. Resetting cannot be undone and may delete recent messages. You need a working SIM for the same number. ## Summary - The two-step verification PIN is a code you chose yourself, and it is different from the 6-digit registration code WhatsApp sends to your phone. - If you forgot it, tap Verify another way on the PIN screen and choose email, SMS or voice call to get a code instead. - If none of those work, WhatsApp unlocks a Reset account option after a waiting period, and nobody can shorten that wait for you. - Resetting cannot be undone and may delete messages received since you last logged in, or your profile too if it has been more than 30 days. - If you never set a PIN at all, someone who took over your number or the previous owner of a recycled number probably did, so do not pay anyone offering to skip the wait. - WhatsApp controls every step of this, and without a working SIM for the same number the account cannot be recovered. You changed phones, typed in the SMS code, and WhatsApp stopped you with one more screen: enter your two-step verification PIN. You set it years ago, or you do not remember setting it at all, and every guess is wrong. You can usually still get in. First try the other verification methods WhatsApp offers on that screen: a code by email, SMS or voice call. If none of them work, WhatsApp unlocks a "Reset account" option after a waiting period. The wait is fixed, and the reset can cost you some messages, so it helps to know which route you are on before you tap anything. This guide explains the PIN versus the SMS code, each reset route, what to do about a PIN you never set, and the scams aimed at people stuck here. Last checked: 29 September 2026. ## How Do You Reset a Forgotten WhatsApp Two-Step Verification PIN? On the PIN or password screen, tap "Verify another way", choose email, SMS or voice call, tap "Continue" and enter the code you receive. That is the fast route, and WhatsApp's page on a [forgotten two-step verification password](https://faq.whatsapp.com/2183055648554771) describes it. If you cannot complete any of those, WhatsApp says the option to reset your account unlocks after a few days; you then tap "Verify another way", "See more" and "Reset account". The reset cannot be undone and may delete recent messages. WhatsApp describes no way to shorten the wait, and nobody outside WhatsApp, including AwareXone, can skip it for you. You need a working SIM with the same number throughout. ## The PIN Is Not the SMS Code Most confusion on this screen comes from two different codes. WhatsApp's page on [registration and two-step verification](https://faq.whatsapp.com/506595211487528) says you see two separate screens when you log in: - Registration: WhatsApp sends a 6-digit code by SMS or phone call to prove you own the number. If you added and verified an email earlier, it can send that code by email instead. This code changes every time. - Two-step verification: an optional extra check that appears only after registration succeeds. This is the PIN or password you chose yourself when you turned the feature on. WhatsApp never sends it to you. So a fresh SMS code will never work in the PIN box, and requesting more SMS codes will not reveal the PIN. WhatsApp's [two-step verification page](https://faq.whatsapp.com/1278661612895630) adds that the extra check can now be your phone number, a password or an email address. > Note: **PIN or password: the same lock.** WhatsApp says it is upgrading the 6-digit two-step verification PIN to a password, which must have at least 8 characters, at least 1 letter and at least 1 number. Depending on your app version, the screen may ask for a PIN or a password. The reset routes below apply to both. ## What You See and What to Do Exact wording varies by app version, phone and language. People search for "Forgot PIN?", "lupa PIN WhatsApp" or "忘记WhatsApp两步验证PIN"; at the time of writing, WhatsApp's help page names the button "Verify another way". Match on the meaning. *WhatsApp two-step verification screens and the next step for each, based on WhatsApp Help Center pages at the time of writing.* | What you see | What it usually means | What to do | | --- | --- | --- | | A screen asking for a 6-digit code sent by SMS or call | Registration: WhatsApp is checking you hold the SIM | Enter the code you received. Never send it to anyone | | After the SMS code, a screen asking for a PIN or password | Two-step verification is on for this account | Enter it if you know it; otherwise tap "Verify another way" | | "Verify another way" offers email | You added and verified an email on the account earlier | Choose email and enter the code from that inbox | | Only SMS or voice call is offered | No verified email on the account | Try SMS or voice call; if that fails, prepare for the reset wait | | "Reset account" appears under "See more" | The waiting period has ended | Read the data loss notes below first, then reset | | A PIN request on a number you just bought, or on an account you never protected | The previous owner of the number, or someone who took over your account, set the PIN | See the section on a PIN you never set | ## Decision Guide: Which Route Is Open to You? Work down this list. Stop at the first line that is true. 1. Do you remember the PIN or password? Enter it. If you are not sure, try the one you most likely used, but do not guess endlessly. 2. Does "Verify another way" offer email, and can you open that inbox today? Choose email. WhatsApp's page on [adding an email](https://faq.whatsapp.com/920665676465008) says the code goes only to the address on the account, and a friend's or relative's email cannot be used. 3. Is SMS or voice call offered, and does the SIM with your number receive messages right now? Choose one and enter the code. 4. None of the above? You are on the reset route. Keep the SIM active and in the phone, and come back when "Reset account" appears. 5. No longer have the SIM or the number? That comes first. WhatsApp's [compromised account page](https://faq.whatsapp.com/1131652977717250) says it is not possible to recover an account without a SIM card with the same phone number. ## Route 1: Verify Another Way by Email, SMS or Voice Call This is the only route that gets you in immediately. WhatsApp lists these steps: 1. On the PIN or password screen, tap "Verify another way". 2. Select email, SMS or voice call. 3. Tap "Continue". 4. Enter the code you received. If the SMS never arrives, WhatsApp's page on [registration problems](https://faq.whatsapp.com/1120385166078156) suggests checking that the SIM is active and can receive SMS or calls, that a prepaid line has enough balance to receive them, and that roaming is on if you are abroad. It also says your mobile provider can confirm whether messages to your number are blocked or delayed. In Malaysia, check that a prepaid line has not expired, top up if needed and restart the phone before you try again. Once you are back in, WhatsApp says you can create a new password without entering the old one: on Android tap your profile, then "Account", "Password", "Change password"; on iPhone tap "You", then the same items. ## Route 2: Wait, Then Reset Your Account If you cannot complete two-step verification any other way, WhatsApp's forgotten password page says the reset option "will unlock after a few days" and that it cannot be undone. Its compromised account page gives a more specific figure for accounts where someone else set the PIN: wait 7 days, then try again. Plan for about a week. 1. Keep the same SIM active and in the phone for the whole wait. 2. When the time is up, open WhatsApp, register with the SMS code, and at the PIN screen tap "Verify another way", then "See more". 3. Tap "Reset account", then "Continue", then "Reset account" twice more to confirm. > Warning: **What a reset can delete.** WhatsApp says that if it has been less than 30 days since you logged in, a reset deletes any messages you received since your last login, but your account history and profile stay active. If it has been more than 30 days, the reset deletes your messages and your profile, and they cannot be recovered. If you still have the old phone logged in, back up your chats before you reset. WhatsApp does not describe any appeal, form or support request that shortens the wait. Reinstalling the app, clearing its data or switching phones is not a workaround either; WhatsApp's compromised account page says reinstalling will not recover the account. ## WhatsApp Asking for a PIN You Never Set If you are sure you never turned on two-step verification, there are two likely explanations. - Someone took over your account. WhatsApp's compromised account page says an unauthorised user may enable two-step verification to keep the real owner out, and that the owner then needs to wait 7 days. The same page says that, whether you know the PIN or not, anyone using your account is logged out once you enter the 6-digit SMS code. Our guide to [getting a hacked WhatsApp back](https://www.awarexone.com/research/whatsapp-hacked-verification-code-malaysia) covers warning contacts and the rest of that recovery, and the ["no longer registered on this phone" guide](https://www.awarexone.com/research/whatsapp-no-longer-registered-this-phone) explains the logout that usually comes first. - The number used to belong to someone else. WhatsApp's page on [seeing your number already in WhatsApp](https://faq.whatsapp.com/3347469605523961) says mobile providers commonly recycle numbers, and that if the previous owner set up two-step verification you need to wait a few days after verifying before you can use it. The previous owner cannot read your chats. If you recently took over an old prepaid number, our guide to [a recycled phone number in Malaysia](https://www.awarexone.com/research/old-phone-number-recycled-malaysia) explains what else to check. ## After You Are Back In: Set It Up So This Never Happens Again Most people stuck on this screen had two-step verification on but no email attached. Fix that first. WhatsApp's page on [managing two-step verification](https://faq.whatsapp.com/1920866721452534) gives the path. - Add an email you control: Settings, "Account", "Email address", "Add email", then enter the six-digit code WhatsApp sends to that inbox. This is what makes "Verify another way" by email possible next time. - Replace the old PIN with a password: WhatsApp's [password page](https://faq.whatsapp.com/798764543324146) lists Settings, "Account", "Password", "Create password". Adding a password turns two-step verification on. - Consider a passkey. WhatsApp's [passkey page](https://faq.whatsapp.com/1240827368203083) says it links the account to your phone's fingerprint, face or screen lock, and can be used instead of an SMS code when registering or restoring the account. - Check linked devices and set a voicemail password that is hard to guess, both from WhatsApp's [account security tips](https://faq.whatsapp.com/1095301557782068). If WhatsApp shows "2FA can't be set at this time. Please try again later.", its page on [delays during two-step verification](https://faq.whatsapp.com/806657404837189) says you may have to wait a few hours after re-registering before you can set it up. For the same protection on your other accounts, see our walkthrough of [two-factor authentication on Instagram, Facebook and TikTok](https://www.awarexone.com/research/two-factor-authentication-instagram-facebook-tiktok). ## Mistakes That Make the Wait Longer or the Loss Bigger - Typing the SMS registration code into the PIN box, or the reverse. They are different codes. - Guessing registration codes until WhatsApp shows "You have guessed the code too many times." WhatsApp says there is no way to make that wait faster. - Letting the prepaid SIM lapse, or swapping numbers, during the reset wait. - Resetting without first backing up chats on an old phone that is still logged in. - Reporting your own account while trying to recover it. WhatsApp warns this could get the account banned. - Paying anyone who says they can remove the PIN or skip the wait. > Warning: **Nobody can skip the wait for you.** WhatsApp's page on [suspicious messages and scams](https://faq.whatsapp.com/2286952358121083) says the app is free and that anyone offering to unban your account for payment is likely after your money or information. The same applies to offers to remove a PIN. An illustrative Bahasa Malaysia version reads "Boleh reset PIN WhatsApp tanpa tunggu, bayar dulu", and a Chinese one "不用等7天，马上帮你解锁". WhatsApp tells users never to share the registration code or password with anyone. Do not install so-called PIN cracking tools either. Sending your code to one of these sellers hands them your account. ## If You Paid Someone or Shared a Code in Malaysia Deal with any money first. The NSRC's [FAQ on the NFCC website](https://nfcc.jpm.gov.my/index.php/en/about-nsrc) says to contact your bank's 24-hour hotline or the NSRC on 997 immediately, then make a police report at the nearest station within 24 hours. It adds that NSRC, the police and banks will never ask for your password, PIN, TAC or OTP. If a so-called PIN remover sent you a fake WhatsApp login page or an app to install, you can report it to CyberSecurity Malaysia's [Cyber999 incident response centre](https://www.cybersecurity.my/portal-main/services/cyber999-overview) by online form, email, phone or its mobile app. If you shared a registration code, log back in with a fresh code from your own SIM as soon as you can, because that logs out the other device. > Note: **WhatsApp decides, and the SIM is the key.** Only WhatsApp controls the reset option and the length of the wait. With your SIM and some patience, a forgotten PIN is usually a delay rather than a loss. Without a working SIM for the same number, WhatsApp says the account cannot be recovered, and nobody can promise otherwise. ## When a Case Review Makes Sense A forgotten PIN on your own account needs no outside help: verify another way, or wait and reset. A second opinion is useful when the PIN appeared after a takeover that also reached your Instagram or Facebook, when the number is a business line customers use for orders, or when your carrier cannot tell you whether the SIM is still yours. SocialSafe by AwareXone, our recovery service, reviews what happened and tells you honestly which official routes remain. We cannot shorten WhatsApp's wait. Our [recovery hub](https://www.awarexone.com/all-types-of-social-media-problem-solutions) explains the case review, and our [Trust Center](https://www.awarexone.com/trust) sets out what we will never ask for, including your WhatsApp code and PIN. ## Frequently Asked Questions ### How long do I have to wait to reset my WhatsApp PIN? WhatsApp's forgotten password page says the reset option unlocks after a few days. Its compromised account page says 7 days when someone else set the PIN, so plan for about a week. ### Can I reset my WhatsApp PIN without email? Yes, if WhatsApp offers SMS or voice call under "Verify another way". If it does not, you wait for the "Reset account" option, which needs only the SIM with your number. ### Will I lose my chats if I reset my WhatsApp account? WhatsApp says a reset deletes messages received since your last login if it has been less than 30 days, and deletes your messages and profile if it has been longer. Chats already backed up to Google or iCloud may be restorable. ### Is the WhatsApp PIN the same as the 6-digit SMS code? No. The SMS code is sent by WhatsApp each time you register. The two-step verification PIN or password is one you chose yourself, and WhatsApp never sends it to you. ### Can WhatsApp support remove my PIN if I prove it is my number? WhatsApp's help pages describe no support route that removes a PIN or shortens the wait. The official routes are "Verify another way" and the "Reset account" option. ## Official sources - [WhatsApp Help Center: Can't remember password (read 29 September 2026)](https://faq.whatsapp.com/2183055648554771) - [WhatsApp Help Center: About two-step verification (read 29 September 2026)](https://faq.whatsapp.com/1278661612895630) - [WhatsApp Help Center: How to manage two-step verification settings (read 29 September 2026)](https://faq.whatsapp.com/1920866721452534) - [WhatsApp Help Center: About passwords (read 29 September 2026)](https://faq.whatsapp.com/798764543324146) - [WhatsApp Help Center: About registration and two-step verification (read 29 September 2026)](https://faq.whatsapp.com/506595211487528) - [WhatsApp Help Center: How to recover a compromised account (read 29 September 2026)](https://faq.whatsapp.com/1131652977717250) - [WhatsApp Help Center: Add your email to your WhatsApp account (read 29 September 2026)](https://faq.whatsapp.com/920665676465008) - [WhatsApp Help Center: Can't complete registration (read 29 September 2026)](https://faq.whatsapp.com/1120385166078156) - [WhatsApp Help Center: About seeing your phone number already in WhatsApp (read 29 September 2026)](https://faq.whatsapp.com/3347469605523961) - [WhatsApp Help Center: About delays during two-step verification (read 29 September 2026)](https://faq.whatsapp.com/806657404837189) - [WhatsApp Help Center: About passkeys (read 29 September 2026)](https://faq.whatsapp.com/1240827368203083) - [WhatsApp Help Center: Account security tips (read 29 September 2026)](https://faq.whatsapp.com/1095301557782068) - [WhatsApp Help Center: About suspicious messages and scams (read 29 September 2026)](https://faq.whatsapp.com/2286952358121083) - [NFCC: National Scam Response Centre FAQ (read 29 September 2026)](https://nfcc.jpm.gov.my/index.php/en/about-nsrc) - [CyberSecurity Malaysia: Cyber999 Cyber Incident Response Center (read 29 September 2026)](https://www.cybersecurity.my/portal-main/services/cyber999-overview) --- AwareXone is an independent Malaysia-based provider, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.