SMS or text message-based two factor authentication (2FA) is not considered secure, and Google wants to replace that confirmation step with QR codes when creating a new Gmail account.
Google tells Forbes that it wants to “move away from sending SMS messages for authentication” when creating a new Gmail/Google account.
In a preview, Google said it is “reimagining how we verify phone numbers.” Historically, the process involves entering a phone number and getting a 6-digit code over SMS/text message that you have to enter online to complete the account creation process.
Moving forward, a “QR code being displayed, which you need to scan with the camera app on your phone.”
Google says this will reduce the threat of phishing. The company also wants to make it harder for bad actors to create Gmail accounts that are used for spam and malware.
This change does not appear to remove SMS as a 2FA option alongside the Google Prompt and other methods. Meanwhile, this new one-time QR code approach sounds different from passkeys.
The Google Account/Gmail change will occur “over the next few months.”
More on Gmail:
FTC: We use income earning auto affiliate links. More.
