Google plans to stop using insecure SMS verification in Gmail
Briefly

Google is transitioning from SMS verification codes to QR codes for account authentication due to security issues associated with SMS, such as SIM swap attacks. Current SMS codes are vulnerable because they are unencrypted, allowing attackers to exploit weaknesses in mobile carrier systems. As a response to this risk, Google plans to implement QR codes, enhancing user security while mitigating the threats linked to SMS authentication. This move aligns with a broader shift in the tech industry toward stronger, more secure authentication methods beyond traditional passwords. Google aims to ensure that user accounts are safer from potential hacks.
Moving to QR codes takes SMS out of the equation, which also means you don't have to worry about your carrier's security practices or lack thereof.
Just like we want to move past passwords with the use of things like passkeys, we want to move away from sending SMS messages for authentication.
Read at Ars Technica
[
|
]