Chat support available. Click the chat icon on the bottom right corner to start chatting with us right away!

mSecure Support

Knowledge Base Forums Submit a ticket

Passkey issue in WhatsApp

I've tried the passkey feature in mSecure, and it works well in most cases. However, I encountered an issue with WhatsApp. When creating a passkey, WhatsApp masks part of the phone number, displaying only the last four digits. As a result, if two WhatsApp accounts share the same last four digits, the passkey works for the first account but not the second. If you try to create a second passkey, it overwrites the first one instead of creating a separate entry. Currently I have a workaround - using mSecure for one passkey and Proton Pass for the other passkey.

Hi,

Thank you for contacting us. The workaround you have is the only way this can work since mSecure is seeing the same last 4 digits so it is assuming it is meant for one record in mSecure. When mSecure sees the same username is being used, it assumes only one account can use this username/phone number, so it only applies changes to the record that matches the username/phone number that it sees being used on the website. If mSecure was able to see the full phone number on the website, this would then resolve the issue. I'm sorry, but there is not much we can do in this situation.

Hi Mark,


I appreciate your reply and agree that such a case may be uncommon and I have only encountered it in this one particular instance. 


However, I have come across some articles that mention username obfuscation through masking may be increasingly encouraged to prevent security breaches, especially in enterprise situations. It may be just a matter of time before username/passkey pairs are required to resolve masked usernames. 


It would be more forward looking if rather than stopping at the very first instance of a match, to continue the matching process, listing all matches found and then to allow the user to identify and select the relevant username himself. Perhaps something to consider in a future update.

Thank you for your response. We will take this feedback in consideration for future updates we do and we thank you for highlighting a website that could benefit from a change in how the browser extension currently works. Please let me know if you need further assistance in the future.


Login or Signup to post a comment