Using WhatsApp on a computer is convenient — a big screen, a proper keyboard, and your chats right next to your work. But every linked device is a full window into your account. If a session stays open on a computer you no longer use, or a device you never approved gets linked, someone else can read your messages exactly as if they were you. This checklist walks you through the whole picture: how many devices can be linked, how to check the list, how to remove anything you do not recognise, and how to stay safe on shared computers.
The Device Limit: Your Phone Plus Four More
Your account always has one primary phone. On top of that, you can link up to four more devices at the same time. That limit has stayed the same through 2026, and almost everything counts toward it:
- A computer using WhatsApp Web in a browser
- The WhatsApp desktop app for Windows or Mac
- A tablet
- A second phone used as a companion
Each browser session counts separately. If you are signed in on Chrome and also on Firefox on the same computer, that is two of your four slots gone, not one. There is no way around the cap either: if all four slots are full and you want to add a fifth device, you must log one of the existing devices out first from the Linked Devices screen.
How to Link a Device Safely
There are two ways to link a device, and both start on your primary phone.
QR code. Open web.whatsapp.com in the browser, or open the desktop app. On your phone, go to Linked devices and tap Link a device. Unlock with your fingerprint, face or PIN if the phone asks, then point the camera at the QR code on the computer screen. If WhatsApp does not recognise the device, it asks you to confirm with Link device — or cancel with Don’t link.
Link with phone number. On web.whatsapp.com, choose the option to link or log in with a phone number, select your country, enter your number and press Next. An eight-character code appears on the computer screen. On your phone, tap the “Enter code to link new device” notification, check the device name and location shown, tap Confirm, verify your identity if asked, and type the eight-character code. On Android you can also start from Linked devices → Link a device → Link with phone number instead. According to WhatsApp’s Help Center, as reproduced in September 2026 guides, this phone-number method works only on WhatsApp Web and WhatsApp for Windows — not in the Mac desktop app.
One warning that prevents a common mix-up: the eight-character linking code is not the six-digit registration code WhatsApp sends by SMS when you set up your account. They are two different codes for two different jobs. Never type either code anywhere except where this guide describes.
Step One of the Checklist: Read Your Linked Devices List
Everything in this article starts with one screen. On Android, tap the three-dot menu at the top right and choose Linked devices. On iPhone, open Settings and tap Linked Devices.
Each entry in the list reliably shows two things: the type of device (a browser, Windows, Mac and so on) and when it was last active. Judge entries by those two facts. WhatsApp shows a location in the linking alert when a new device is being added, but a location is not guaranteed inside this list, so do not go looking for one — an entry you cannot explain by its type and last-active time is an entry to remove.
Make this a regular habit, the way you would check your bank balance. Do not wait for a warning to appear before you look.
How to Log Out Any Device You Do Not Recognise
Removing a device takes seconds, and you can do it from your phone even if the computer is in another city:
- Open Linked devices on your phone.
- Tap the device you want to remove.
- Tap Log out and confirm.
Repeat for every entry you do not recognise. There is no single verified “log out from all devices” button in WhatsApp, so one by one is the reliable method — if your version happens to show a bulk option, fine, but tapping each device always works. You can also log out from the companion itself: inside WhatsApp Web, open Settings and choose Log out.
Logging a device out does not delete your chats. It only removes that device’s access; your conversations stay safe on your phone.
There is one last-resort full logout. If you re-register your number on a replacement phone, every linked device is automatically logged out. That is a nuclear option for a lost or stolen phone situation, not a menu item for routine cleaning.
Two Different Timers: 14 Days and 30 Days
Linked devices work independently. Your WhatsApp Web and your second phone keep receiving and sending messages even when your primary phone is switched off or its battery is dead. They do not stay connected forever, though. Two separate inactivity timers apply, and many guides confuse them by quoting only one:
| Timer | What is inactive | What happens |
|---|---|---|
| 14 days | Your primary phone | If you do not use WhatsApp on your main phone for over 14 days, all linked devices are logged out |
| 30 days | One linked device | If a single linked device sits unused for 30 days, that device alone is disconnected |
In practice: open WhatsApp on your primary phone at least once every two weeks and your companions stay connected. Leave one laptop untouched for a month and only that laptop drops off.
Here is the catch that makes manual checking essential. These timers only clear out idle sessions. If you use WhatsApp on your phone every day — as most of us do — a forgotten session on an old office computer that still gets opened now and then can stay connected indefinitely. The timers will not clean it up for you. The Linked Devices list will.
The “Don’t Link” Alert: Your Live Protection Since June 2026
In June 2026 WhatsApp added a safeguard at the exact moment a link is attempted. If you start linking your account to an unfamiliar device, an alert appears warning that it could be a scam, and it shows the location of the request. If you are not the person trying to link a new device, or the location in the alert is not yours, choose Don’t link and the attempt is rejected.
Keep push notifications for WhatsApp turned on. They let you review a linking attempt and remove a device you do not recognise straight from the notification.
But be honest about the limits: this alert fires at linking time, and WhatsApp does not guarantee a separate push alert after every link on every account. The alert is a strong lock on the door — the Linked Devices list is still your regular patrol. Use both.
Shared Computers: The Habits That Actually Protect You
Most linked-device accidents happen on shared machines: an office PC, a computer in a library, a laptop at a printing shop. Three facts matter here.
Closing the browser tab does not log you out. The session stays authorised until you end it. The next person who opens web.whatsapp.com on that browser can walk straight into your chats.
An incognito or private window is not a logout either. Closing a private window clears the history and cookies stored on that PC, but guides still advise logging out manually inside WhatsApp Web to be fully safe. And anything you downloaded during the session — photos, documents, PDFs — is saved in the Downloads folder as normal, incognito or not. On a shared machine, delete those files yourself.
“Stay signed in on this browser” is only for your own computer. The Web login screen may offer to keep you signed in. Tick it only on a private computer that you control and lock. Never on a library, office or hotel computer.
The correct habit is simple: before you leave any shared computer, open the menu or Settings inside WhatsApp Web and choose Log out. Already left and realised you forgot? Open Linked devices on your phone and log that computer out remotely, as described above.
GhostPairing: The Scam That Turns Your Own Linking Against You
The most dangerous linked-device scam right now even has an official warning. India’s CERT-In issued an advisory on 19 December 2025 rating the GhostPairing attack “high” severity.
It starts with a message that looks like it comes from a contact you trust — something like “Hi, check this photo” — with a Facebook-style preview link. The link opens a fake viewer page that asks you to “verify” yourself. Hidden in that flow, the page abuses the link-with-phone-number feature: you type in your number or a pairing code, and without realising it, you have just authorised the attacker’s browser as a trusted linked device on your account.
From that moment the attacker reads your messages, photos and videos in real time through WhatsApp Web — no password stolen, no SIM swap needed. Your phone keeps working normally, so most victims notice nothing.
The defence is a rule, not a setting: never enter a pairing code, and never scan a QR code, just because a message or a web page tells you to. Linking is something you start yourself, on your own phone, for your own computer. If you think you may already have fallen for this, open Linked devices right now and log out every entry you do not recognise.
Encryption Is Not Broken — an Unwanted Device Is Authorised
Some people hear about these scams and assume WhatsApp’s encryption has failed. It has not. Personal messages, media and calls stay end-to-end encrypted on linked devices, exactly as on your phone. Each linked device gets its own set of encryption keys, and the sending phone encrypts the message separately for every device. If one device’s keys were ever compromised, they could not be used to unlock messages sent to your other devices.
The real risk is different: a linked device is an authorised endpoint. It is allowed to read your chats, because at some point it was approved — by you, in a hurry, or by a trick like GhostPairing. That is why this whole checklist is about controlling who gets authorised, not about fixing encryption.
Verify Your Security Code With Important Contacts
Every one-to-one chat has its own security code, shown as a QR code and a 60-digit number. You will find it by opening the chat, tapping the contact’s name, and opening Encryption. To verify a chat, scan the other person’s QR code — a green check mark means the codes match — or compare all 60 digits through some other channel, like a phone call. Since April 2023, Automatic Security Codes based on Key Transparency can also verify the connection for you from that same Encryption tab.
If you ever see a “security code changed” notice, do not panic. It usually just means the other person changed phones or reinstalled WhatsApp. It is a prompt to re-verify if the chat is sensitive, not proof of hacking. To get these notices reliably, turn on Settings → Account → Security notifications → Show security notifications. Your messages stay encrypted whether the setting is on or off.
For extra assurance on the web, the Code Verify browser extension checks that the code served to web.whatsapp.com matches a known-good copy — green means verified, red means possible tampering. It never reads your messages.
What Linked Devices Cannot Do
Linked devices are powerful, but they are not full copies of your phone. According to WhatsApp’s Help Center, as reproduced in September 2026 guides, a linked device cannot view a live location, cannot create or view broadcast lists, and cannot interact with businesses through WhatsApp Flows. A linked device also cannot register an account or link further devices — linking always starts from the primary phone, which is another reason your phone’s screen lock matters so much.
And one hard rule: only ever link your account through the official apps and web.whatsapp.com, which you should type into the browser yourself. Guides warn that linking your account to an unofficial app or website can lead to a temporary or permanent ban, and can expose the account to spam and scams.
New Companions: iPad, Apple Watch and Web Calling
The family of companion devices grew in 2025. WhatsApp launched a native iPad app on 27 May 2025. It links to the WhatsApp account on your phone — the iPad works as a companion, not as a primary device — and needs iPadOS 15.1 or later. In November 2025 the official Apple Watch app arrived, bringing call notifications, full messages, voice-message recording, reactions and more chat history to the wrist, for Apple Watch Series 4 and later on watchOS 10 and above, with messages and calls still end-to-end encrypted.
Calling from the big screen grew too. WhatsApp Web gained one-to-one voice and video calling with screen sharing during 2026, and a broader July 2026 update added group calls, a Calls tab, reactions and the ability to transfer a call between devices — all end-to-end encrypted, with no time limit.
Coming Later: Features Still in Beta
A few linked-device protections are still being tested and are not available to everyone yet, so do not depend on them today. Simultaneous-use alerts — a warning when a linked device is active at the same time as your phone — are reported as under development in beta. Chat Lock on linked devices, where a secret code created on your primary phone hides locked chats on your other devices, has been seen in testing rather than confirmed as a general release. And a Restricted Chat option, spotted in October 2026 beta versions, would let you block a specific one-to-one chat from being used on linked devices at all. All three are labelled beta for a reason: promising, not yet standard.
The device limit, the linked-devices list and the removal steps in this checklist are described in detail by Gulf News, which explained how your WhatsApp could still be linked to a device you do not use or do not own — and how to check the list and log that device out before it becomes a problem.
Also read: “WhatsApp Spy Apps” Are a Scam: What Parents and Partners Must Know and WhatsApp Passkey Setup Guide
FAQs
How many devices can I link to one WhatsApp account?
Your primary phone plus up to four linked devices. Computers on WhatsApp Web, the Windows and Mac desktop apps, tablets and a second companion phone all count the same way, and each browser session counts separately. If all four slots are full, log one device out before adding another.
I closed the WhatsApp Web tab on a shared computer. Am I logged out?
No. Closing the tab — or even using an incognito window — does not end the session. Open Linked devices on your phone, tap that computer, and choose Log out. Next time, log out from inside WhatsApp Web before you leave the machine.
What is the difference between the 14-day and 30-day rules?
They are two different timers. If your primary phone goes unused for more than 14 days, every linked device is logged out. If one linked device sits idle for 30 days, only that device is disconnected. Neither timer removes an active session, so check the list yourself.
A message asked me to enter a code to see a photo. Is that the GhostPairing scam?
Very likely, yes. That is the pattern CERT-In warned about in December 2025: a fake viewer page tricks you into entering a pairing code, which links the attacker’s browser to your account. Never enter a code or scan a QR because a message or page asks you to. If you already did, open Linked devices and log out anything you do not recognise.