From privacy to trust and back again. What comes next?

I read the announcement about WhatsApp usernames and my first reaction was not excitement. It was something closer to recognition. I have been here before. We all have.

My Yahoo Messenger username was something I will not repeat here, but it involved the word "cool" and a number. I was in my early twenties. You could be anyone on Yahoo Messenger. That was the point. Your username was your identity and your phone number was something you only shared when things got serious. The internet was a place you went to, and you went there as a character you partly invented.

Nobody asked for a phone number. Nobody expected one. Privacy was the default, not a feature.

Then came BlackBerry Messenger. The BBM PIN era. You still did not share a phone number; you shared an 8-character code that felt oddly exclusive, like a club membership. I remember asking a young chap in a Lajpat Nagar showroom for his BBM PIN in 2008 because we wanted to stay in touch about a business deal. It felt more serious than exchanging email addresses and yet completely private. The PIN connected you without exposing you.

And then WhatsApp arrived... and everything changed.

Spam dropped. Fake accounts became harder. The anonymous internet of "asl?" gave way to a network where the person messaging you was almost certainly the person they claimed to be. That was valuable. People trusted WhatsApp in a way they had never trusted Yahoo Messenger, because the identity verification was baked into the onboarding. You could not sign up without a SIM card. Your phone number was your passport.

The cost of that trust was privacy. Your number was visible to anyone you messaged for the first time. Group admins could see it. Businesses you contacted had it. Over more than a decade and 3 billion users, WhatsApp's phone number requirement went from a trust feature to a privacy liability. What was gneerally seen as a strength began to feel like a vulnerability, especially as WhatsApp expanded from personal messaging into commerce, communities, and payments. The more surfaces you used it on, the more people had your number who probably should not.

So now, in 2026, WhatsApp is introducing usernames. A more private way to connect. No public directory. No searchable database. Someone must know your exact username to reach you.

We are back where we started in 1998...

Actually, I want to stop here for a moment, because I think I am making the circle sound more complete than it is.

The 1998 version of username privacy was privacy by anonymity. You could be nobody, which meant you could also be a fraudster, a predator, or someone entirely different from who you claimed. The platform did not care and could not verify. Privacy and trust were in opposition; you could have one or the other, not both.

What WhatsApp is attempting in 2026 is something technically different. The username hides your phone number, but you are still a verified account behind it. You went through phone-based onboarding. WhatsApp knows who you are even if the person messaging you does not. The privacy is for the stranger you are messaging, not from the platform itself.

That is a meaningful distinction. But it also raises a question that I do not think anyone in the announcement addressed.

That is a much harder trust to maintain. Especially for a platform whose parent company's primary business is advertising.

So here is the question I keep coming back to. If this is a cycle, what does the next turn look like? In 2028 or 2030, when some new platform emerges, will it win by requiring phone numbers again? Will the pendulum swing back to trust-first, privacy-second, because the username era produced new kinds of fraud or harassment that we have not yet anticipated?

I think it might. But I also think there is a third possibility that has not yet been properly built.

What if the next platform solves for both? Not privacy through anonymity and not trust through exposure, but verified anonymity... a system where I can prove to you that I am a real human being with a real identity, without telling you what that identity is. The technology for this exists in pieces: cryptographic proofs, government digital IDs, biometric authentication that produces a token rather than a name. What does not exist yet is a consumer product that has made this simple enough for someone's grandmother in Nagpur to use it without reading a manual.

The day someone builds that... I think the cycle stops. Or at least, it changes shape.

I am not sure I got this right. I have been wrong about what technology people will adopt before. The history of the cycle is accurate. Whether the next turn goes back to trust-first, or whether someone finally builds the thing that is both private and trustworthy, I genuinely do not know.

What I do know is that my Yahoo Messenger username had the word "cool" in it, and I thought that was enough identity for anyone. Twenty-eight years later, WhatsApp thinks a username is the future. Maybe the real story is not about privacy or trust at all. Maybe it is about how long it takes us to learn from the last version of the same mistake. :)