Mountain View, CA, February 24, 2025 – In a move to bolster account security and curb global SMS abuse, Google is set to phase out its SMS-based two-factor authentication (2FA) option for Gmail users, according to a report by Forbes.

For years, Gmail users have been able to verify their identities by receiving a text message containing a code. However, inherent vulnerabilities in SMS—such as SIM swapping and interception - have prompted Google to seek more secure alternatives.

“The goal is to reduce the impact of rampant, global SMS abuse,” said Ross Richendrfer, a Gmail spokesperson, as quoted by Forbes. Under the new system, users will see a QR code on their screen that must be scanned with their smartphone to complete the authentication process.

The switch to QR code verification means that while users will still need to rely on their smartphones, they will no longer be subject to the security risks associated with SMS messages. Criminals have exploited SMS verification in various ways, including convincing carriers to port numbers to new devices or generating revenue through “traffic pumping” schemes.

This strategic shift is part of a broader industry trend toward stronger authentication methods. While Google, along with other tech companies, ultimately envisions a future where passkeys and passwordless systems become the norm, the transition is expected to be gradual. In the meantime, enhancing the security of existing processes remains a priority.

Google has not yet announced a specific timeline for ending SMS-based 2FA, but the update is anticipated to roll out over the coming months. The company’s decision underscores the need for constant innovation in cybersecurity as cyber threats continue to evolve.

By replacing SMS with QR code-based authentication, Google aims to offer a more secure and robust verification method while maintaining user convenience—a key factor as companies worldwide work to protect personal data in an increasingly digital age.

Copied