Google is planning to ditch years-old SMS-based two-factor authentication (2FA) for Gmail users and will be replacing it with QR code verification. 

Advertisment

Google is making the shift to reduce fraud and improve security in the application as there have been concerns about phishing attacks and SIM-swapping fraud. 

Also read: Mexico threatens Google with legal action for renaming Gulf of Mexico

Why is it changing?

Advertisment

Cybercriminals and hackers used to hijack phone numbers and steal verification codes. The hackers often used to trick users into revealing their one-time SMS codes through phishing attacks, making SMS authentication a less secure option. 

Currently, Gmail users receive a six-digit authentication code via SMS after entering their passwords. 

This was introduced in 2011 and has been one of the most widely used security measure despite newer and more secure alternatives. 

Advertisment

Also read: Ex-Google boss fears AI could ‘harm innocent people if it ends up in wrong hands’

What is the new system?

However, now, the users will need to scan the QR code with their smartphone cameras to verify their identity for a secured login. 

Google has not confirmed the official rollout date yet, however, it is expected to begin over the next few months. 

Moreover, it is also unclear whether Google will also discontinue phone-call-based authentication, which users used to opt for instead of SMS codes. 

Also read: Google sparks criticism by removing Black History Month, Pride Month, other such events from Calendar

Apart from these, Google also offers more secure login options, including:

  • Security Keys: Physical security keys such as YubiKey offer hardware-based authentication for maximum protection.
  • Google Prompts: Users receive a pop-up notification on their registered device, allowing them to approve or deny a login attempt.
  • Authenticator Apps: Time-based one-time passwords (TOTP) generated by Google Authenticator or third-party apps like Authy.

Also read: Amid uncertainty TikTok returns to Apple and Google app stores

(With inputs from agencies)