New Delhi | October 7, 2026
WhatsApp is rolling out a server-side security measure that may prevent some users from logging into the messaging app if their phones are running outdated versions of iOS or Android.
Affected users reportedly see a warning asking them to update their phone’s operating system before they can regain access. The measure is currently being applied to selected accounts on both platforms.
Why WhatsApp Is Requiring OS Updates
The reported change is aimed at reducing security risks associated with older operating systems. Devices that no longer receive security patches can remain vulnerable to known exploits and malware.
WhatsApp’s end-to-end encryption protects messages during transmission, but an outdated or compromised phone can still expose information at the device level.
Users May Not Need a WhatsApp Update
The restriction is being delivered through WhatsApp’s servers, meaning users may encounter the warning without installing a new version of the WhatsApp app.
The exact operating-system versions triggering the new login restriction have not been officially disclosed. WhatsApp’s current support information lists Android 6.0 and newer as supported, while iPhones currently require iOS 15.1 or newer; WhatsApp says the iOS requirement will move to iOS 15.5 or newer from November 30, 2026.
What Users Should Do
Users who receive the warning should open their phone’s Settings and check for available software updates. After installing a supported operating-system update, they can try accessing WhatsApp again.
If the device cannot receive a newer supported OS, users may eventually need to move to a newer handset. WhatsApp regularly reviews and retires support for older operating systems as part of its security and compatibility policy.
More Security Measures Under Testing
WhatsApp is also reportedly testing warnings for accounts connected to unofficial WhatsApp Web clients. The feature would encourage users to switch to the official WhatsApp Web service.
The latest developments indicate a broader focus on protecting accounts from compromised devices, malicious software and unofficial third-party services.
