TL;DR
Google has implemented a new registration process for Gmail that mandates users scan a QR code and send an SMS message. This change aims to enhance security but raises questions about accessibility and privacy.
Google has updated its Gmail registration process to require users to scan a QR code and send a text message to verify their phone number, replacing the previous method of account creation. This change aims to improve security but has raised concerns about accessibility and user privacy.
According to reports from Hacker News, as of March 8, 2026, users attempting to register a new Gmail account can no longer complete the process solely via QR code scanning. Instead, the process now involves scanning a QR code with a smartphone, which then triggers an SMS message sent from the user’s device to Google for verification purposes. This method is purportedly designed to make account hijacking more difficult, although experts note it is not foolproof.
Some users have observed that this change also blocks the use of third-party SMS services like SMSpool, complicating account creation for privacy-focused individuals or those using secondary or temporary numbers. The new verification step appears to be universal across regions, but specific country-based restrictions or variations are still unclear. There is also speculation about how this process interacts with international SIM use or temporary numbers, particularly in countries with strict ID registration laws, such as Italy.
Why It Matters
This update is significant because it indicates a shift towards more stringent verification measures by Google, potentially reducing automated account creation and fraud. However, it also raises concerns about user privacy, especially regarding the collection and handling of phone number data, and accessibility issues for users with basic phones or in regions with limited smartphone use. The new process could impact how easily users can create and manage their accounts, particularly those relying on secondary or temporary numbers.
Tera Barcode Scanner 2D Portable Wireless: BT 2.4G USB Pocket Reader, 1200
Portable waterproof 2D barcode scanner with multiple connection options and vibration alerts for versatile data collection.
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Background
Google has been gradually increasing security measures for account registration and verification over recent years, including the rollout of two-factor authentication (2FA) and other identity checks. In February 2025, reports indicated plans to expand SMS verification for all account activities, not just registration. The recent change to require QR code scanning and SMS verification appears to be part of this ongoing effort. Prior to this, account creation was simpler, involving only email and password inputs, with optional 2FA. The new process reflects a broader industry trend toward tighter security protocols amidst rising concerns over account hijacking and identity theft.
“Supposedly, using the QR code on the smartphone triggers an SMS sent from your phone to Google in order to verify your phone number. Supposedly, this is for security.”
— Hacker News user
“You just wait, someone will come up with a service that sends a sms to google. Damn it… Google keeps closing more and more.”
— Scott (user)
“Sending a SMS that is quite odd given phone spoofing options. I hope they are not stupid enough to use that for MFA.”
— Anonymous user
What Remains Unclear
It remains unclear how widespread the rollout is across different countries and regions, and whether exceptions exist for users with basic phones or in locations with strict SIM registration laws. Additionally, the exact technical details of how Google verifies the SMS and whether spoofing can bypass the check are still uncertain. The impact on privacy, especially regarding data collection from QR code scans and SMS messages, is also not fully understood.
What’s Next
Google is expected to continue refining the verification process, possibly introducing alternative methods for users without smartphones. Monitoring how users and privacy advocates respond will be key, as well as any potential workarounds or security vulnerabilities that emerge. Further updates from Google regarding regional variations or exceptions are anticipated in the coming weeks.
Key Questions
Why did Google change the Gmail registration process?
Google states the change is aimed at enhancing security by making account creation more resistant to automated or fraudulent registration.
Can I still register a Gmail account without a smartphone?
Currently, the new process requires scanning a QR code with a smartphone to send an SMS, which may exclude users with only basic phones or no mobile device.
Will this prevent me from creating accounts in countries with strict SIM registration laws?
The impact varies; some regions may have additional restrictions or requirements, and the process may differ depending on local regulations.
Is the SMS verification process secure against spoofing?
Experts express skepticism about the security of SMS verification due to potential spoofing techniques, though Google claims the process is designed to be secure.
What should users do if they don’t have a smartphone?
At present, users without smartphones may face difficulties registering new accounts, and Google has not announced alternative methods yet.
