The method of sending a security code via SMS message to login to an app is no longer safe. For this, the technology industry has started using passie instead of password. The login process through the passki depends on the biometric procedure (fingerprint or face ID). Similarly, code-making apps and app-without two-factor authentication methods have become more popular recently. Many people think that it is better to have an authentication via SMS than not having any authentication. However, Google has confirmed that they are going to exclude the SMS code system from Gmail.
“We want to get away from the authentication system through SMS messages, as we want to adopt passki technology rather than using passwords,” said Ross Richendropar, a Google spokesman. As a result, the authentication process will be conducted through the QR code, instead of the SMS code from now on. Google is taking this step, so that it can reduce the impact of SMS abuse worldwide.
Due to the fact that Gmail is excluding SMS code
Google Richendroer and his colleague Kimberley Samra said the SMS code creates various challenges for security. SMS codes may be a victim of phishing, where the code is sent, the user may not get access to the device and the SMS code may fail to provide security to the user if there is a weakness in the security of the phone's network. Richendropar said that if a cheater easily collects someone's phone number, SMS has no security value.
Another major danger associated with the SMS code is that criminals use these codes to do criminal acts. The new scam or deception that Google has identified in the past few years is 'traffic pumping' or artificial traffic growth. In this case the fraudsters want to send many SMS messages, so that they get money for each sent message.
Changed to QR code from SMS
Google said the phone number verification method will be changed within the next few months. Richendropar said, “This will be a new idea, where you will scan a QR code without giving your number, which will have to scan through your phone's camera app.”
Google has claimed that the use of QR code will be available for two main benefits. They are-
1. Reduce the risk of phishing: Using the QR code will have no opportunity to share users' security code, thus reducing the risk of phishing.
2. Reduce dependence on carrier: The QR code can reduce the dependence on phone carriers (mobile phone service companies) through the QR code, which was a major weakness of security through SMS code.
“SMS code creates an additional risk for users and we are going to launch a new approach to increase security through this new method.”
Google has not yet announced a specific date for this change. However, it is certain that this step will be implemented as soon as possible.
References: Forbes
