Google is replacing Gmail's two-factor authentication with QR codes instead of six-digit authentication codes



Google's two-factor authentication tool for Gmail has traditionally consisted of six-digit verification codes sent via SMS messages. Google is reportedly looking to replace the SMS authentication method with a QR code to reduce the impact of fraudulent use of SMS.

Google is replacing Gmail's SMS authentication with QR codes | The Verge

https://www.theverge.com/news/618303/google-replacing-sms-codes-qr-gmail-security-two-factor-authentication



According to a report from Forbes , Google is moving away from sending six-digit authentication codes via SMS as a two-factor authentication tool for Gmail. When Forbes contacted Google, Gmail spokesman Ross Richendorfer responded that the move was to 'reduce the impact of SMS abuse, which is rampant around the world.'

When asked why Google uses the six-digit authentication code, Richendorfer said, 'It's to verify that the person who creates or owns the Gmail account is the same person, and to prevent criminals from 'creating thousands of Gmail accounts to distribute spam or malware.''



The Verge, a technology media outlet, said that two-factor authentication using a six-digit authentication code is better than not using it at all, because cybercriminals can trick users into obtaining or forcing them to share the authentication code sent to them. In addition, the Verge pointed out that the security measures of carriers and the efforts of their support teams are also 'dependent on the enthusiasm of the people who work on it.'

Google also points out that replacing the six-digit verification code with a QR code will help users avoid

traffic pumping and toll fraud, where fraudsters trick online service providers into sending mass SMS messages to numbers they control, in order to collect money for each message that is delivered, Richendorfer said.

Once the change is implemented, instead of a six-digit authentication code, users will be sent a QR code that can be scanned with a smartphone camera. The QR code will no longer function after it has been used once, eliminating the risk of users being tricked into sharing it and becoming victims ofSIM swaps and other fraudulent schemes.



in Web Service,   Security, Posted by logu_ii