Key TakeawaysGoogle is replacing SMS-based two-factor authentication (2FA) for Gmail with QR code scanning to enhance security and convenience.The shift is driven by the increasing exploitation of SMS authentication by hackers through phishing, spoofing, and mobile carrier manipulation.QR codes offer a more secure alternative, as theyre unique to each session, cannot be intercepted, and eliminate risks tied to SIM card theft or fraud.A Gmail spokesperson recently confirmed that Google will let go of the current SMS two-factor authentication process. Itll bring in QR code scanning as a verification step instead, making the process more secure and convenient.Just like we want to move past passwords with the use of things like passkeys, we want to move away from sending SMS messages for authentication Ross Richendrfer, head of security and privacy public relations at GoogleCurrently, when you log in to your Google account on a device, you receive a six-digit authentication code on your registered phone number that you need to manually enter to complete the login process.This SMS-based two-factor authentication process is a widely used method by apps and platforms to ensure extra security. However, with the recent increase in the abuse of SMS verification systems, its evident that hackers have found multiple ways to exploit this tactic. Through phishing, spoofing, and other methods.One common instance of scammers tricking users into getting their verification code is by calling them disguised as representatives of banks or big companies. Then, they ask for the verification code as an OTP to move forward with a fraudulent online process that likely doesnt lead anywhere legitimate.Another concern is that SMS authentication relies on mobile carriers, and its possible to manipulate the carrier itself. This would involve generating fake requests and making money through the messages sent, or even worse, deflecting such important private messages to cybercriminals.Read more: Google will use AI to determine whether youre really 18+Why Are QR Codes a Better Alternative?Scanning a QR code will in all likelihood get rid of the security concerns mentioned above. The update is supposed to be rolled out soon.Its also worth noting that this update aligns with Googles long-term security strategy to reduce dependence on SMS-based 2FA and move towards a more seamless and convenient security system that doesnt put passwords at the forefront of security.Unlike SMS codes, QR cannot be intercepted. Theyre unique, meaning every user gets a different QR every time they initiate a session. Simply put, QR codes cannot be imitated that easily, either. Users will be required to scan the QR code displayed on the screen with their devices camera to authenticate the login.This mechanism solves one more major issue with SMS-style verification. Stealing or losing the SIM card. Such an unfortunate incident so far meant losing access to your Google account, putting the account at the risk of being used by the person who has stolen the SIM. Not anymore, says Google.QR codes make sure youre not dependent on your SIM, a small chip, for your digital privacy. It essentially puts the power back in your hands, as bad actors will now need physical access to your device to execute anything malicious.In addition to Google, WhatsApp Web is one of the famous platforms known for using QR codes for logins.Add Techreport to Your Google News Feed Get the latest updates, trends, and insights delivered straight to your fingertips. Subscribe now! Subscribe now Alpa is a senior editor with a wealth of experience in alternative finance, fintech, cryptocurrency, app security software, and the medical industry. She's currently an in-house managing editor with the Techreport team.Alpa is passionate about breaking down complex topics and sharing informative content that provides value. View all articles by Alpa Somaiya Our editorial processThe Tech Reporteditorial policyis centered on providing helpful, accurate content that offers real value to our readers. We only work with experienced writers who have specific knowledge in the topics they cover, including latest developments in technology, online privacy, cryptocurrencies, software, and more. Our editorial policy ensures that each topic is researched and curated by our in-house editors. We maintain rigorous journalistic standards, and every article is 100% written byreal authors.