Google will replace SMS codes with QR codes for logging into Gmail

Google plans to replace SMS codes with QR codes for account verification.

Currently, one way to log in to Gmail is by entering a six-digit code received via SMS. However, this method has long been considered vulnerable from a security standpoint. Replacing SMS codes with QR codes will help reduce the scale of fraud and mass registration of fake accounts.

Over the next few months, instead of receiving a code via SMS, users will be able to scan a QR code using their smartphone camera to verify their identity.

The security of SMS codes largely depends on the mobile carrier and the user's access to their phone. However, scammers can intercept codes by redirecting SMS messages to their own numbers. Google has also recorded cases of abuse of SMS codes in criminal schemes, including so-called "traffic pumping" — when attackers mass-request SMS codes, receiving payment from carriers for them.

The new feature aims to enhance account protection and reduce dependence on mobile carriers during authentication.

Source: forbes.com