WhatsApp usernames are coming. Turn on this setting before strangers can use them.

WhatsApp opened username reservations on 29 June, and the quiet part of the announcement matters more than the headline. Once usernames go fully live later this year, anyone who knows your handle will be able to message or call you without ever seeing your phone number, and without you seeing theirs. In a country where 96% of internet users are on WhatsApp, according to the We Are Social and Meltwater Global Digital Report for 2025, that rewrites the rules of who can reach you. WhatsApp shipped a lock alongside the change, and almost nobody has switched it on yet.

What is changing

WhatsApp has tied your identity to your phone number since it launched. Usernames break that link. TechCrunch reported on 29 June 2026 that users can now reserve a handle of 3 to 35 characters ahead of a full rollout later this year, and Bloomberg noted that reservations are opening early because more than 3 billion people are about to compete for the same names. When the feature switches on in your country, a new contact will be able to start a chat or a call with your username alone, and your number stays hidden.

Meta has kept the design deliberately narrow. There is no username search and no directory, so a stranger needs your exact handle to reach you, and the format rules block names that start with www or end in a domain extension, which closes off the most obvious phishing lookalikes. Businesses and creators can claim the username they already use on Instagram or Facebook, provided they prove ownership through Meta's Accounts Centre.

WhatsApp also built a second lock for the new route, called the username key. It is an optional four-digit code that a new contact must enter along with your handle before their first message or call can land, and your existing chats are untouched by it. Reporting from Tech Edition indicates the numeric code is a temporary format that will become alphanumeric at full launch, but the mechanism stays the same: without the key, the username on its own gets a stranger nowhere.

Why this matters in South Africa

WhatsApp is not one channel among several here. It is where South African business gets done: quotes, invoices, delivery confirmations, client groups, and staff coordination all run through it, and the same We Are Social and Meltwater research found that one in three SA internet users names WhatsApp as their favourite platform outright. A change to who can open a chat with you is a change to your front door.

The privacy gain is real. Handing your number to a Marketplace buyer, a new supplier, or a school group has always been a one-way transaction, because a number cannot be taken back once it is out, and it anchors your banking profile, your SIM, and half of your account recovery flows. A username can be changed, restricted, or retired without breaking any of that.

The new risk is quieter. Handles get screenshotted, forwarded, and reused, and if your WhatsApp username matches your public Instagram handle, everyone who can see that profile effectively holds your WhatsApp address from the day usernames go live. The domain-blocking rules stop crude fakes, but they do not stop a handle sitting one character away from your trading name, and the scam playbook that currently leans on foreign numbers and "hi mom" texts will adapt to any new way of opening a conversation. A message from a clean, professional-looking username carries one less red flag than a message from a +44 number, which is exactly why the sender will prefer it.

There is also a timing window worth using. Reservations are open worldwide, but the messaging feature itself rolls out gradually by country over the coming months. South Africans who reserve a handle and set the key now will have the route locked before strangers can use it. Anyone who waits will be configuring their defences after the traffic has already started.

What to do this week

1. Reserve your username now, on your personal and business accounts. Update WhatsApp, open Settings, tap Account, then Username, and pick a handle you can say aloud and spell over a bad phone line. If you trade under a name, reserve it before a squatter does, because there are 3 billion people in this queue.
2. If your business already has an Instagram or Facebook handle, claim the matching WhatsApp username through Meta's verification. Proof of ownership goes through Accounts Centre. An unclaimed trading name is an open invitation for someone else to receive messages meant for you.
3. Turn on the username key. Open WhatsApp, tap your profile, tap Username, then Contact me by username, then People who know my key. WhatsApp shows you a four-digit code, and from then on, only the people you hand that code to can reach you by your username. Treat the code like your home address and share it only with people you would want at your door.
4. Decide deliberately whether your WhatsApp handle should match your public profiles. Matching handles are convenient for a business that wants to be found, and a liability for an individual who does not. If your Instagram is public and your WhatsApp username copies it, you have published your reachability, so either accept that trade or pick a different handle and keep the key on.
5. Update how your household and your staff verify new contacts. The old tell was the unknown foreign number. A username strips that signal out, so the verification habit has to move up a level: SARS (the South African Revenue Service) will still never message you a refund link, your bank will still never ask for your PIN, and any new contact claiming to be a colleague, courier, or family member gets confirmed through a channel you already trust before anything else happens.

Where Ubuntu Guard fits

Settings like the username key only protect you if someone in the business owns the job of finding them, switching them on, and rolling them out across every staff device. That is the ground our cybersecurity assessment covers: we go through your accounts, devices, and messaging channels methodically, tell you in plain language where the gaps are, and hand you a prioritised list of what to fix first. No jargon, and no tools you do not need.

Not sure your setup is ready for this change? WhatsApp us and we will walk you through the next step: wa.me/27791595040

Cybersecurity Made Simple

© 2026 Ubuntu Guard Cybersecurity | Durban, South Africa
ubuntuguard.co.za