Google has recently confirmed that the use of short message service (SMS) code for Gmail authentication will be scrapped. The tech giant company disseminated this information in a quest to curb threats, theft, and all forms of security bridges.
If you would agree with me, the use of SMS code authentication is far behind, especially in this most technology-advanced era.
Recall that in recent times, the use of the traditional passwords or passcodes for authentications emerged as a new switch to passkeys. Google in a bid to tighten up both mobile and general security decided to shift from SMS code authentication to QR codes scanning.
Google further explained that the reason for ditching the SMS code authentication for QR codes scanning is to reduce the unnecessary impact of ‘sms abuse’.
I understand the news of this emerging shift might feel unnecessary to a number of gmail users, who would prefer the conventional way of receiving authentication codes for verification.
However, Google took all these into consideration, by explaining the reasons and why it’s going to be of utmost advantage to the end users.
Below are the reason behind this ditching from sms code authentication to QR codes;
According to Gmail Spokesperson, Ross Richendrfer, he says: Just like we want to move past passwords with the use of things like passkeys, We Want To Move Away From Sending SMS Messages For Authentication.”
“So began an email conversation with Google that revealed, for the first time, SMS codes are to be ditched when it comes to authentication and replaced with QR codes to “reduce the impact of rampant, global SMS abuse.”
It’s clearly obvious that Google currently uses SMS code authentication primarily for two distinct purposes: security and abuse control. The head of security and privacy PR Google workspace, Richendrfer further explained that, this is to verify “that we’re dealing with the same user as before,” while the latter ensures fraudsters don’t abuse Google’s services. An example of this, as provided by Google, was when criminals create thousands of Gmail accounts in order to distribute spam and malware.
Reason Behind Gmail’s Ditching Of SMS Code For QR Codes
SMS codes pose significant security risks, as highlighted by Richendrfer and his colleague, Kimberly Samra at Google. These codes are vulnerable to phishing attacks, users may not always have access to the device receiving the codes, and their security is dependent on the practices of the user’s mobile carrier. “If a fraudster can easily deceive a carrier into taking control of someone’s phone number,” Richendrfer explained, “the security value of SMS is completely undermined.”
Additionally, SMS verification codes are frequently exploited in various criminal activities. One emerging scam that Google has identified over the past few years is known as traffic pumping. This scheme is also referred to as artificial traffic inflation or toll fraud, but the underlying method remains consistent.
Richendrfer and Samra further added: “It’s where fraudsters try to get online service providers to originate large numbers of SMS messages to numbers they control, thereby getting paid every time one of these messages is delivered.”
Shift From SMS To QR Codes For Gmail Authentication
“Over the next few months, we will be reimagining how we verify phone numbers,” Richendrfer told me; “Specifically, instead of entering your number and receiving a 6-digit code, you’ll see a QR code being displayed, which you need to scan with the camera app on your phone.”
I’m not the world’s greatest fan of QR codes as many of my articles can attest to, but this remains a momentous security moment for Google and Gmail users.
Google affirms that the shift from SMS codes to QR codes are twice better to the end user, here’s why;
- Minimising the risk of Gmail users falling victim to phishing attempts where they might be tricked into sharing security codes with malicious actors. This is particularly significant because, in many cases, there is no such code to share in the first place.
- Reducing the dependency of Google users on their mobile carriers for anti-abuse protections, at least in most scenarios.
“SMS-based codes pose a significant security risk for users,” Richendrfer noted. “We’re excited to introduce a groundbreaking new approach that reduces the attack surface and enhances user safety against malicious activities.”
While the announcement concluded with a tantalizing hint of “more to come on this soon,” no specific timeline was provided for when these changes will be rolled out for Google account holders and Gmail users. One thing is certain: these updates can’t arrive soon enough.
JOIN THE CONVERSATION→ Telegram | X/Twitter | Facebook | WhatsApp|WhatsApp Channel|Mobile App|Instagram
