Verification announced for this summer
Presented on 13 May among Android security updates, Key Verifier concerns end-to-end encrypted conversations in Google Messages. Google plans to introduce it later this summer on devices running Android 10 or later. The announcement therefore does not mean the setting is already available to everyone.
The feature relies on the public encryption keys associated with the participants. Google plans verification in Contacts through QR scanning or number comparison. The code provides a visual way to compare this information without manually copying a long sequence.
The QR code compares a key
This QR code is not presented as a link to a page to visit. It forms part of a check between two people using Google’s intended process. Meeting to compare the information lets you rely on a person you recognise rather than just the name displayed on screen.
This is a useful distinction from QR codes on menus, payments or advertising. Their appearance does not reveal their function: the application interpreting the data gives the scan its meaning. Our guide to how QR codes work explains the connection between encoded content and use.
The same number can hide a change
Google gives the example of an attacker taking over a number and using it on another device, including after a SIM swap. The contact would then lose its verified status. That signal is a reason to reach the person through an already known channel before trusting an unusual request.
A loss of verification needs an explanation; it does not, by itself, prove an attack. A legitimate device change can also alter the keys in use. The practical response is to confirm the change with the person and repeat verification through the official process.
A targeted protection with a specific role
Verifying a conversation’s keys does not guarantee that every claim from a contact is true, an attachment is safe or a requested payment is justified. The feature addresses trust in the other participant in an encrypted conversation; it is not a general certification of incoming messages.
For other QR codes encountered in daily life, the Qurl security guide helps examine context and destination. Our reader displays decoded content; it does not replace Key Verifier or validate a Google contact’s keys.