Instead of getting six-digit log-in codes via SMS, which is unsafe and prone to phishing, users will see a QR code that they can scan with their phone’s camera.

Google is shifting default 2FA to QR codes. Passkeys are the future, but in the meantime, Google is shifting to QR codes as the default verification method for phone numbers.