Google opting for QR codes instead of SMS codes for Gmail authentication

Google will be replacing its verification method of sending SMS messages with QR codes due to security challenges.

This has become the norm for a variety of companies over the years, with people being sent an SMS text message with a code which they must input when they wish to log in.

Now, however, a ‘reimagining’ of how accounts are verified will be taking place over the next few months. The news comes from Forbes who reported the change-up exclusively and was confirmed by the search giant.

Forbes: Exclusive: Google Confirms Gmail To Ditch SMS Code Authentication

“Over the next few months, we will be reimagining how we verify phone numbers,” Richendrfer told me; “Specifically, instead of entering your number and receiving a 6-digit code, you’ll see a QR code being… pic.twitter.com/zAeocmFwqB

— Marsha Collier (@MarshaCollier) February 24, 2025

A Gmail spokesperson Ross Richendrfer told the publisher: “Just like we want to move past passwords with the use of things like passkeys, we want to move away from sending SMS messages for authentication.”

The company has previously adopted the SMS approach for security reasons as it aims to verify they’re dealing with the same user as before. But with technology, hackers and scams improving, it’s not as perfect of an option as it perhaps once was.

“If a fraudster can easily trick a carrier into getting hold of someone’s phone number,” Richendrfer said, any “security value of SMS goes away.”

With advanced scams, people now don’t always have access to the device. In March 2024, the Federal Trade Commission’s Consumer Advice website shared an alert about imposter-like scams which include gaining access to someone’s verification code.

Another scam, known as traffic pumping, is where hackers generate large amounts of fake SMS traffic through a website which then prompts that business to send one-time PINs via SMS.

“Over the next few months, we will be reimagining how we verify phone numbers,” Richendrfer told Forbes; “Specifically, instead of entering your number and receiving a 6-digit code, you’ll see a QR code being displayed, which you need to scan with the camera app on your phone.”

According to Google, the benefits of QR codes include reducing the phishing risk of Gmail users being tricked into sharing their security codes with a threat actor.

“SMS codes are a source of heightened risk for users,” Richendrfer said.

“We’re pleased to introduce an innovative new approach to shrink the surface area for attackers and keep users safer from malicious activity.”

While the confirmation has been provided and obtained by Forbes, an actual date for when this will be happening isn’t yet known.

Featured Image: AI-generated via Ideogram

The post Google opting for QR codes instead of SMS codes for Gmail authentication appeared first on ReadWrite.