Under the new system, users will no longer receive 6-digit SMS codes for authentication. Instead, they will scan a QR code displayed on their screen using their phone’s camera to verify their identity. The change follows Google’s earlier rollout of the Identity Check feature for Android devices, which introduced enhanced biometric authentication methods.
Gmail spokesperson Ross Richendrfer explained the rationale: “Just like we want to move past passwords with the use of things like passkeys, we want to move away from sending SMS messages for authentication and replace them with QR codes to reduce the impact of rampant, global SMS abuse.”
The decision addresses mounting security concerns around SMS authentication, which has become vulnerable to various attacks. Mobile phishing attacks increased by 26 percent in 2024, according to recent data. This trend supports findings from a recent industry report documenting the decline of SMS-based authentication due to rising costs and security risks.
The change represents Google’s collaboration with Apple and Microsoft in supporting FIDO authentication standards, indicating a broader industry move toward enhanced security methods. This development extends the growing adoption of FIDO standards in global digital identity infrastructure.
While Google has not set a specific implementation date, the company plans to share additional rollout details soon. The transition will require Gmail users to learn a new verification process, affecting millions of accounts worldwide.
Sources: The Verge
—
February 24, 2025 – by the ID Tech Editorial Team
