Following an exclusive conversation with Google, I can reveal that Gmail is to ditch the use of SMS codes for authentication purposes. Here’s what you need to know.
It is certainly no secret that using SMS text messages for security codes used to authenticate your identity is far from ideal. Just as the tech industry is slowly moving awayhave increasingly become the norm in recent years.
But SMS has always been said to be better than no authentication at all, which is hard to argue with. Now, following a privileged conversation with Google insiders, I can exclusively reveal that Gmail is finally looking to ditch SMS codes for authentication. Here’s everything you need to know.“Just like we want to move past passwords with the use of things like passkeys,” Gmail spokesperson Ross Richendrfer told me, “we want to move away from sending SMS messages for authentication.” So began an email conversation with Google that revealed, for the first time, SMS codes are to be ditched when it comes to authentication and replaced with QR codes to “reduce the impact of rampant, global SMS abuse.” Google currently uses SMS verification primarily for two distinct purposes: security and abuse control. The former, Richendrfer explained, is to verify “that we’re dealing with the same user as before,” while the latter ensures fraudsters don’t abuse Google’s services. An example of this, as provided by Google, was when criminals create thousands of Gmail accounts in order to distribute spam and malware. SMS codes present numerous security challenges, according to Richendrfer and his colleague at Google, Kimberly Samra. They can be phished, people don’t always have access to the device the codes are sent to, and they are reliant on the security practices of the user’s carrier. “If a fraudster can easily trick a carrier into getting hold of someone’s phone number,” Richendrfer said, any “security value of SMS goes away.” Then there’s the fact that SMS verification codes are also often at the very heart of many criminal operations. One relatively new scam that Google has observed across the last couple of years is what it refers to as traffic pumping. I’ve also heard this called artificial traffic inflation and toll fraud, but the methodology is always the same. Over to Richendrfer and Samra to explain: “It’s where fraudsters try to get online service providers to originate large numbers of SMS messages to numbers they control, thereby getting paid every time one of these messages is delivered." “Over the next few months, we will be reimagining how we verify phone numbers,” Richendrfer told me; “Specifically, instead of entering your number and receiving a 6-digit code, you’ll see a QR code being displayed, which you need to scan with the camera app on your phone.”as many of my articles can attest to, but this remains a momentous security moment for Google and Gmail users.Reducing the phishing risk of Gmail users being tricked into sharing their security codes with a threat actor. Primarily, and rather obviously, since there’s no such code to share in the first place. Removing reliance, in most cases at least, of Google users on their phone carrier for anti-abuse protections. “SMS codes are a source of heightened risk for users,” Richendrfer concluded, “we’re pleased to introduce an innovative new approach to shrink the surface area for attackers and keep users safer from malicious activity.” Signing off with an intriguing “look for more from us on this in the near future,” but without an actual date for implementing the changes for Google account holders and Gmail users, it’s something I’m sure we can all agree cannot come soon enough.
Gmail Authentication Gmail Verification Code Gmail Security Google Authentication Code SMS Google SMS Gmail SMS QR Code Gmail Security Code
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Google’s Gmail Upgrade—Do Not Leave Your Account At RiskWhy you should change your account settings — if you can.
Read more »
Google Confirms Gmail Attacks—Do Not Ignore FBI WarningYou must never do this — here’s what to know.
Read more »
Google Enhances Gmail Android Menus for Easier NavigationGoogle has quietly rolled out updates to the Gmail Android app, focusing on improving the usability of menus. These changes include the addition of icons next to menu items, dividers for grouping related options, and reorganized menus for better navigation. The updates aim to make finding and managing emails on the Android app more efficient and user-friendly.
Read more »
Google Gemini Features Removed From iOS Google AppGoogle has discontinued Gemini features within its iOS Google app, directing users to the dedicated Gemini app. This shift aims to streamline the Gemini experience and consolidate its functionality into a single platform. Users can continue accessing all Gemini features, including AI-powered tools for brainstorming, research, planning, and creative tasks, through the standalone Gemini app available on the App Store.
Read more »
Google to Ditch Gemini Support in Google App for iOSGoogle is phasing out Gemini support from its main Google app for iOS, urging users to exclusively rely on the standalone Gemini app. This move consolidates Gemini features and provides a more focused user experience. The decision follows the introduction of exclusive features in the standalone Gemini app, such as Gemini Live, which were unavailable within the Google app. Users can continue accessing Gemini through the dedicated app available on the App Store.
Read more »
New Google Leak Reveals AI Video Creation Test For Gemini AppGoogle is testing new AI video creation features for Google Gemini, according to a new report.
Read more »