Google QR Code-Based Gmail Login Being Tested [Open Sesame! Google Now Allows Desktop Browser Gmail Login Via Smartphone QR Code Scanner]

Tweet

In a bid to reduce the incidence of login fraud, Google is implementing yet another alternative way of logging in to users’ Gmail accounts from a Web browser. This time, the system uses a combination of QR codes and a smartphone with a QR code scanner app.

Google started implementing its 2-step verification process early in 2011 to help combat phishing attacks and fraudulent logins. With the system, a user is required to enter one’s password on a PC (or mobile web browser), and input a short code sent to a verified mobile device via SMS or other means. This way, the system can better determine if it’s indeed the user who wishes to gain access.

This could sometimes prove cumbersome, but given the spate of username and password thefts that malicious hackers have perpetrated of late, it’s one way to protect one’s online data and identity, especially if using public computers. With the new QR-based login, a user will have to scan a QR code onscreen before Google grants access. The system is still being tested, but the steps involved are as follows:

• A user goes to http://accounts.google.com/sesame, which will generate a QR code onscreen;
• User takes a snapshot of the QR code with a compatible Android or iPhone app;
• The smartphone opens the resulting URL on the mobile browser;
• If the smartphone user is currently logged in to one’s Google account, access is then granted. If not, he or she will have to key in the correct username and password combination;
• The next page will warn users to only proceed if one has scanned a barcode from “google.com.”
• User can then choose to start with Gmail or with iGoogle by tapping the appropriate button on the smartphone screen;
• The web browser will automatically refresh to reflect the user’s choice.

I tried the new system with my Android smartphone, and it worked. But, since I had two-step verification enabled, the post-login page from the smartphone prompted me to key in the verification code, which was sent to me via SMS. But after that, login proceeded without a glitch. Assuming you’re already logged in on your mobile web browser, it’s a matter of clicking which page to open — Gmail or iGoogle. Either way, this system certainly makes it more secure to login to a public terminal, especially with the risk of keyloggers taking password information physically from the keyboard.

In case you’re wondering — we’re curious about the use of “sesame,” too. Perhaps Google’s next login system will involve the user yelling “Open, sesame!” for Gmail access.

Tweet

You may also like:

Google Rolls-Out Gmail Scribbles For Gmail In The Mobile...

Google Chromium Native Client to Improve Performance of...

Google Chrome to Support Multiple Browser Profile Sync...

Google Chrome: Google Starts Pushing Ads to Google Chrome...