First, QR codes eliminate the numeric authentication code, so there's no code for a scammer to intercept or exploit. Second, they're not dependent on any anti-abuse or anti-SMS swapping protections that may be in place with your mobile carrier.

In an exclusive conversation with Google insiders, Gmail spokesperson Ross Richendrfer confirmed the company’s commitment to moving away from SMS authentication. “Just like we want to move past passwords with the use of things like passkeys, we want to move away from sending SMS messages for authentication,” Richendrfer stated.

Google has announced plans to implement QR code authentication for Gmail, replacing the current SMS-based verification system. The change marks a significant shift in Google’s authentication strategy as the company continues its broader push toward making passkeys the default login option for personal accounts and moving away from traditional security methods like passwords and SMS codes.