Google expected to tweak Gmail security this week
A range of improvements are expected to shore up Gmail against hacking and phishing attacks, including an additional line of defence for lost passwords.
Google is expected to update Gmail this week with a number of security enhancements aimed at reducing the risk of phishing and hacking attacks on users' accounts.
US technology site TechCrunch claims to have been tipped off about the security fixes by a Google insider, and says the new measures could be rolled out as soon as today.
The report goes into detail about two specific changes Google is said to be implementing aimed at better protecting users' account details. The first is an additional line of defence when a user is attempting to access their account on a new computer and has lost or forgotten their password.
The new feature will reportedly allow the user to request a new single-use pass key that will be sent via text message, which they can then enter into Gmail to authenticate themselves and simultaneously lock out all other avenues of accessing the account.
The second fix relates to the implementation of a different version of OAuth for Gmail's contacts exporter, which is used by other services to import Gmail contacts. It's likely that OAuth WRAP will be put forward, with WRAP profiles having a number of important capabilities that were not available previously in OAuth.
According to TechCrunch, the security enhancements are at least partly a response to the perceived vulnerability of Google and other high-profile technology firms in the light of the large-scale cyber attacks that originated in China and targeted around 20 unnamed companies at the turn of the year.
Google has yet to officially comment on the rumoured updates.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
-
Google says reports of a 'huge' Gmail breach affecting millions of users are false, againNews Reports of a major Gmail affecting millions of users have been flooding the web this week – Google says they're "false" and you've nothing to worry about.
-
Google hits back at 'entirely false' reports of major Gmail security breachNews Reports of a massive Gmail hack affecting billions of users have been denied by Google
-
Microsoft 365 admins warned over new Gmail anti-spam rulesNews Microsoft 365 users have been warned they could be penalized for failing to adhere to new anti-spam standards
-
Google launches dark web monitoring tools for US Gmail usersNews First launched for Google One customers, the dark web report service is rolling out to all US-based Gmail users
-
North Korean-linked Gmail spyware 'SHARPEXT' harvesting sensitive email contentNews The insidious software exfiltrates all mail and attachments, researchers warn, putting sensitive documents at risk
-
Android malware campaign 'targets 1 million Google accounts'News Check Point says Android malware campaign can steal tokens from Google accounts
-
Gmail will soon alert you if you receive unencrypted emailsNews Google researchers plan warning system to fend off malicious messages
-
Google plays down Gmail address & password leakNews Search giant claims fewer than two per cent of the five million usernames and passwords leaked would have worked

