Google has made a key decision regarding security: Say goodbye to SMS codes as a verification method in GmailInstead, users will be required to use QR codes to authenticate. This change is intended to improve protection against frauds such as phishing and credential theft through social engineering attacks.
Two-step authentication has established itself as an essential security barrier for protecting online accounts. However, the SMS-based method has proven to be vulnerable to various threats. Below, we take a closer look at the two-step authentication method. Why Google has decided to withdraw this system and how the new QR code authentication will work.
Why has Google decided to remove SMS code verification?
For years, Gmail's authentication system has used the SMS message verification with six-digit codes to verify the identity of users. However, this form of authentication has been the subject of multiple attacks due to its inherent vulnerabilities.
Some key reasons why Google has decided to take this step include:
- Phishing risk: Attackers can trick users into revealing their verification codes, allowing them to access other people's accounts.
- SIM swapping fraud: Cybercriminals take over phone numbers by transferring them to new SIM cards, allowing them to intercept verification SMS messages.
- Dependence on mobile operators: If a user has no mobile signal or is abroad, SMS authentication may fail. This is one of the most common problems with Why I'm not receiving SMS on my Android.
- SMS Traffic Fraud: Some criminals generate large volumes of verification messages to profit from telecommunications fees.
How QR code authentication will work
The removal of SMS codes in Gmail does not mean that two-step authentication is going away. Google plans to replace this method with a New system based on QR codes, which has already been implemented in other of its services.
The operation will be simpler and safer:
- When users try to log in to Gmail, instead of receiving a code via SMS, You will see a QR code on the screen.
- To complete verification, you will need to Scan the QR code with your mobile phone camera.
- The process will automatically verify your identity without the need to manually enter a numeric code.
This system has obvious advantages: it eliminates the possibility of attackers stealing verification codes by fraudulent means and reduces dependence on telecom operatorsFor those who still use the old system, it is important to know What to do if I don't receive confirmation SMS.
Advantages of the new verification method
The transition from SMS to QR codes is not only motivated by the vulnerabilities of text messages, but also by the benefits offered by the new system:
- Greater security: Since there is no numeric code that can be stolen, phishing attacks become more difficult.
- Easy to use: Scanning a QR code is faster and more convenient than typing a numeric code.
- Less dependence on third parties: The user does not need to trust his mobile operator to receive codes.
- Compatible with most devices: Almost all current smartphones can scan QR codes without the need for additional applications.
When will this change start to take effect?
Google has not yet provided a exact date for the mass implementation of this system, but has indicated that it will be introduced in the next monthsThe transition is likely to be gradual, with an initial phase in which users can choose to continue using SMS before being phased out entirely.
In addition, the company could enable alternative methods for those who cannot use QR codes, such as physical security keys or specialized authentication applications. A well-known one is the Two-step verification on Google which is also available on other platforms.
Google's decision to phase out SMS codes in favor of QR codes responds to the need for Strengthen the security of Gmail accounts, reduce fraud and improve the user experience. With this measure, the company seeks to adapt to emerging threats and offer a more robust and reliable authentication system. Share the information and help other users improve their security.