Mountain View, CA, February 24, 2025 – In a move to bolster account security and curb global SMS abuse, Google is set to phase out its SMS-based two-factor authentication (2FA) option for Gmail users, according to a report by Forbes.
For years, Gmail users have been able to verify their identities by receiving a text message containing a code. However, inherent vulnerabilities in SMS—such as SIM swapping and interception - have prompted Google to seek more secure alternatives.
“The goal is to reduce the impact of rampant, global SMS abuse,” said Ross Richendrfer, a Gmail spokesperson, as quoted by Forbes. Under the new system, users will see a QR code on their screen that must be scanned with their smartphone to complete the authentication process.
The switch to QR code verification means that while users will still need to rely on their smartphones, they will no longer be subject to the security risks associated with SMS messages. Criminals have exploited SMS verification in various ways, including convincing carriers to port numbers to new devices or generating revenue through “traffic pumping” schemes.
This strategic shift is part of a broader industry trend toward stronger authentication methods. While Google, along with other tech companies, ultimately envisions a future where passkeys and passwordless systems become the norm, the transition is expected to be gradual. In the meantime, enhancing the security of existing processes remains a priority.
Google has not yet announced a specific timeline for ending SMS-based 2FA, but the update is anticipated to roll out over the coming months. The company’s decision underscores the need for constant innovation in cybersecurity as cyber threats continue to evolve.
By replacing SMS with QR code-based authentication, Google aims to offer a more secure and robust verification method while maintaining user convenience—a key factor as companies worldwide work to protect personal data in an increasingly digital age.
Read next
19:30
AI
The U.S. Department of Justice on Friday abandoned its proposal that would have forced Alphabet’s Google to divest its investments in artificial intelligence companies, including rival Anthropic, as part of its broader antitrust case aimed at curbing Google’s alleged illegal search monopoly.
20:45
SpeciesNet
Google has open sourced SpeciesNet, an artificial intelligence model designed to automatically identify animal species from photos captured by camera traps.
16:00
Google’s Android
The Court of Justice of the European Union (CJEU) has ruled that Google’s refusal to allow Enel’s JuicePass app access to its Android Auto platform constitutes an abuse of its dominant market position, siding with Italy’s antitrust authority.
16:00
Google’s Veo 2
Mountain View, CA, February 17, 2025 – Google has quietly announced the pricing for its new AI video model, Veo 2, revealed last December.
15:00
Google
Google is expected to face charges from the European Commission for breaching rules designed to rein in the power of Big Tech, according to sources with direct knowledge of the matter.
What is your opinion on this topic?
Leave the first comment