Gmail registration now requires scanning a QR code and sending a text message

TL;DR

Google has updated its Gmail registration process to require users to scan a QR code and send an SMS message for account verification. This change aims to improve security but may impact users with limited device options or privacy concerns. The full implications are still developing.

Google has updated its Gmail account registration process to require users to scan a QR code and send an SMS message for verification, replacing the previous method that relied solely on email or password entry. This change aims to enhance account security but has raised concerns about accessibility and privacy among users.

According to reports from user experiences and discussions on Hacker News, the new process involves users first scanning a QR code displayed on their screen with their smartphone. This action triggers the phone to automatically send an SMS message to Google’s servers, which verifies the user’s phone number as part of the registration. The change appears to be a move toward more secure, device-linked verification, making it harder for automated or malicious account creation.

As of March 8, 2026, some users have reported that the QR code-based registration is no longer available, suggesting a phased rollout or testing period. The process seems to be designed to prevent the use of third-party SMS verification services, including spoofing or automated tools, although experts note that SMS verification can still be spoofed or bypassed with technical skill.

Why It Matters

This development is significant because it marks a shift toward more stringent account security measures by Google, potentially reducing automated account creation and fraud. However, it also raises concerns about user privacy, especially regarding the collection of device and location data through QR scanning and SMS transmission. Additionally, users without smartphones or those using basic phones may find registration more difficult or impossible, impacting accessibility.

KUIIYER Mini Bluetooth Barcode Scanner, Wireless 2D QR 1D Bar Code Scanners with LCD Screen Display & Setting Keypad & AI Voice, Small Portable Handheld Barcode Reader for Smart Phone, Computers & POS

KUIIYER Mini Bluetooth Barcode Scanner, Wireless 2D QR 1D Bar Code Scanners with LCD Screen Display & Setting Keypad & AI Voice, Small Portable Handheld Barcode Reader for Smart Phone, Computers & POS

❤️ Better Barcode Scanner, More Convenient Work ❤️

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Background

Google has historically relied on email and password for account registration, with optional two-factor authentication via SMS or authentication apps. The move to require QR code scanning and SMS sending aligns with broader industry trends toward stronger verification methods. Previous reports from February 2025 indicated plans for more comprehensive SMS-based security, but the recent implementation confirms these intentions are now active. The change also comes amid ongoing privacy debates and regulatory scrutiny over data collection practices.

“Supposedly, using the QR code on the smartphone triggers an SMS sent from your phone to Google in order to verify your phone number. Supposedly, this is for security.”

— Hacker News user

“You just wait, someone will come up with a service that sends an SMS to Google. Damn it… Google keeps closing more and more.”

— Scott (user on Hacker News)

“I know Google keeps a record of all the phone numbers you have used with them. They will generally not let you verify your account with a number you don’t own anymore.”

— Anonymous user

Virtual Number - Receive SMS Online Verification

Virtual Number – Receive SMS Online Verification

virtual sms,

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

What Remains Unclear

It remains unclear how widespread the new verification process is at this point, whether it applies universally across all countries, and how it will impact users with basic phones or in regions with strict SIM registration laws. The extent to which spoofing or other circumvention methods can bypass this system is also not yet confirmed.

Prox PRD - Phone Separation Alert Device | Stop Forgetting or Leaving Phone Behind at Home, Work, Restaurant, or Car | Proximity Alert Notification Approx 50-150ft | Stay Connected | No Subscription

Prox PRD – Phone Separation Alert Device | Stop Forgetting or Leaving Phone Behind at Home, Work, Restaurant, or Car | Proximity Alert Notification Approx 50-150ft | Stay Connected | No Subscription

☑️ STOP FORGETTING YOUR PHONE – GET A RELIABLE PHONE SEPARATION ALERT BEFORE YOU LEAVE YOUR PHONE BEHIND…

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

What’s Next

Google is expected to continue rolling out the new registration process globally. Further updates may clarify whether alternative verification options will be provided for non-smartphone users. Security experts and privacy advocates will likely monitor the system’s robustness and potential vulnerabilities in the coming weeks.

Eyoyo Upgraded QR Code Scanner Bluetooth Android Barcode Scanner, Portable Back Clip Wireless 1D 2D UPC ISBN Inventory Barcode Reader PDF417 Data Matrix Code Compatible with iPhone, Android Phone

Eyoyo Upgraded QR Code Scanner Bluetooth Android Barcode Scanner, Portable Back Clip Wireless 1D 2D UPC ISBN Inventory Barcode Reader PDF417 Data Matrix Code Compatible with iPhone, Android Phone

Phone Back Clip Design: The Eyoyo phone scanner, weighing only 90g (3.1oz) and featuring a retractable bracket, can…

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Key Questions

Why does Google require scanning a QR code and sending an SMS for Gmail registration?

Google states that these steps are intended to enhance account security by verifying the user’s phone number through a more direct, device-linked process.

Will this change affect users with basic phones or without smartphones?

Yes, users without smartphones may face difficulties registering or may be unable to complete registration if they cannot scan QR codes or send SMS messages.

Can this verification process be bypassed or spoofed?

While it aims to prevent automated or malicious account creation, some experts believe SMS verification can still be spoofed or bypassed with technical skills.

Does this mean Google is collecting more data about users?

Potentially, as QR code scanning and SMS sending could allow Google to gather device and location data, raising privacy concerns.

Is this process temporary or part of a larger security update?

It appears to be part of a broader security enhancement initiative, with further updates expected as the rollout continues.

You May Also Like

Devsecops: Integrating Security Into Development Workflows

Always integrating security early in development workflows transforms software resilience—discover how DevSecOps can elevate your projects.

Ethical Hacking Explained: Learning to Think Like an Attacker

The key to effective cybersecurity lies in understanding how attackers think, and ethical hacking reveals the secrets behind their methods—continue reading to learn more.

AI-Powered Cyber Attacks: Are We Prepared?

How vulnerable are we to rapidly evolving AI-powered cyber threats, and what steps can we take to stay ahead of these emerging dangers?

Why Router Firmware Updates Are Your Smart Home’s Weakest Link

Having outdated router firmware can expose your entire smart home to security risks you may not realize until it’s too late.