Google expected to tweak Gmail security this week
A range of improvements are expected to shore up Gmail against hacking and phishing attacks, including an additional line of defence for lost passwords.

Google is expected to update Gmail this week with a number of security enhancements aimed at reducing the risk of phishing and hacking attacks on users' accounts.
US technology site TechCrunch claims to have been tipped off about the security fixes by a Google insider, and says the new measures could be rolled out as soon as today.
The report goes into detail about two specific changes Google is said to be implementing aimed at better protecting users' account details. The first is an additional line of defence when a user is attempting to access their account on a new computer and has lost or forgotten their password.
The new feature will reportedly allow the user to request a new single-use pass key that will be sent via text message, which they can then enter into Gmail to authenticate themselves and simultaneously lock out all other avenues of accessing the account.
The second fix relates to the implementation of a different version of OAuth for Gmail's contacts exporter, which is used by other services to import Gmail contacts. It's likely that OAuth WRAP will be put forward, with WRAP profiles having a number of important capabilities that were not available previously in OAuth.
According to TechCrunch, the security enhancements are at least partly a response to the perceived vulnerability of Google and other high-profile technology firms in the light of the large-scale cyber attacks that originated in China and targeted around 20 unnamed companies at the turn of the year.
Google has yet to officially comment on the rumoured updates.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
Microsoft 365 admins warned over new Gmail anti-spam rules
News Microsoft 365 users have been warned they could be penalized for failing to adhere to new anti-spam standards
By Ross Kelly Published
-
Google launches dark web monitoring tools for US Gmail users
News First launched for Google One customers, the dark web report service is rolling out to all US-based Gmail users
By Ross Kelly Published
-
North Korean-linked Gmail spyware 'SHARPEXT' harvesting sensitive email content
News The insidious software exfiltrates all mail and attachments, researchers warn, putting sensitive documents at risk
By Rory Bathgate Published
-
Android malware campaign 'targets 1 million Google accounts'
News Check Point says Android malware campaign can steal tokens from Google accounts
By Ingrid Fadelli Published
-
Gmail will soon alert you if you receive unencrypted emails
News Google researchers plan warning system to fend off malicious messages
By Joe Curtis Published
-
Google plays down Gmail address & password leak
News Search giant claims fewer than two per cent of the five million usernames and passwords leaked would have worked
By Caroline Donnelly Published
-
Gmail app hack: Why it's unlikely to derail your BYOD plans
In-depth Davey Winder takes a closer look at last week's news about the 92 per cent success rate of the Gmail app hack
By Davey Winder Published
-
Week in review: Windows 8, China loves Gmail and mobile phone radiation
News Windows 8 is coming! But when? The Chinese hack Gmail! Or did they? Mobile phones cause cancer! Or do they? It's been a very confusing week...
By Alan Lu Published