Why Gmail is replacing SMS codes with QR codes - and what it means for you

Google is aiming to dump SMS as a two-factor authentication method for Gmail and switch to a more secure approach using QR codes. In an email conversation with Forbes published in a story on Sunday, Gmail spokesperson Ross Richendrfer described this upcoming change. Instead of entering your number and getting a six-digit code via SMS, you'll see a QR code that you scan with your phone's camera. Richendrfer said Google is making this switch to "reduce the impact of rampant, global SMS abuse." In an email to ZDNET, Richendrfer provided more details. Also: Gmail just made it easier to pay your bills -- here's how Using two-factor authentication with your online accounts is highly recommended as a way to verify your identity and guard against suspicious or malicious logins. But some forms of 2FA are better than others. A common method is to receive a confirmation code via an SMS text message. However, that type of unencrypted communication can be exploited by cybercriminals. If you're wondering why QR codes, Richendrfer and Google security communications manager Kimberly Samra zeroed in on the vulnerabilities of SMS authentication. A scammer can spoof such a message to trick you into sharing the correct verification code. You may not always have access to the device in which you receive the code. And through SIM swapping, a mobile carrier can be fooled into transferring the victim's phone number, allowing the scammer to receive SMS texts, thus negating the security value of the a...