Gmail’s New Shortcut Lets You Copy 2FA Codes Instantly

What the new Gmail shortcut does

Google has added a small but powerful feature to Gmail that detects verification codes in incoming messages and places a copy button next to them. When the button is tapped, the code is placed on the device clipboard without the user having to open the email, scroll, or manually select the text. The change is part of Google’s broader effort to reduce friction in everyday workflows, especially for security‑related tasks.

How to activate the shortcut

The shortcut is enabled by default for most accounts, but users can verify the setting in the Gmail app’s preferences. The steps are straightforward:

• Open the Gmail app on Android or iOS.
• Tap the menu icon and select Settings.
• Choose the account you want to adjust.
• Scroll to Smart features and ensure Show verification code shortcuts is toggled on.

Once the option is active, any email that contains a numeric code of typical length (six to eight digits) will display a small Copy code button directly beneath the code line.

Where the code appears in the inbox

The button is placed inline, right after the code, so the visual cue is clear even in a condensed view. For example, an email from a banking service that reads “Your verification code is 824913” will now show a Copy code button immediately below the number. Tapping the button copies 824913 to the clipboard, ready to be pasted into the authentication field on a website or app.

Benefits for two‑factor authentication workflow

Speed and convenience

Traditional 2FA requires users to switch between the authentication prompt and the email client, locate the code, and copy it manually. The new shortcut eliminates two taps and several seconds of navigation. For power users who log in to multiple services daily, the time saved adds up quickly. A rough estimate from user reports suggests a reduction of about three to five seconds per login, which translates into noticeable efficiency over a week.

Reducing errors and security concerns

Manual copying can lead to mistakes such as selecting the wrong number, copying extra spaces, or inadvertently exposing the code to onlookers. The one‑tap copy action reduces the chance of human error, thereby strengthening the overall security of the authentication process. In addition, because the code never leaves the Gmail interface until the user decides to paste it, the exposure window is shorter.

Comparison with other email clients

Outlook and Apple Mail approaches

Microsoft Outlook on mobile offers a similar feature called “Copy verification code,” but it appears only after the user opens the message. Apple Mail does not provide a native shortcut; users must rely on third‑party password managers that scan the inbox for codes. Gmail’s inline button therefore stands out as the most frictionless solution currently available on major platforms.

Potential privacy considerations

Data handling by Google

Google processes the email content locally on the device to identify numeric patterns that match typical verification codes. According to the Google Workspace Updates blog, the analysis does not involve sending the email body to external servers, preserving user privacy. Nonetheless, users should be aware that any feature that scans message content could theoretically be leveraged for data profiling if the underlying policy changes.

Tips for getting the most out of the feature

Using with password managers

Many password managers, such as 1Password or Bitwarden, already capture verification codes from notifications. Pairing those tools with Gmail’s copy button creates a double safety net: the code can be pasted directly from the clipboard or auto‑filled by the manager. This redundancy is useful when a device is locked or when the user prefers not to switch apps.

Customizing notifications

To ensure the shortcut appears promptly, keep push notifications for Gmail enabled. The Android developer documentation on shortcuts explains how the system prioritizes quick actions, and Gmail follows those guidelines. Users can also adjust the notification sound or vibration pattern to differentiate 2FA messages from regular email traffic.

Overall, the new Gmail shortcut streamlines a routine but critical part of digital security. By reducing the steps required to retrieve and use verification codes, Google helps users maintain strong authentication habits without sacrificing speed. As more services adopt similar inline actions, the broader ecosystem may see a shift toward smoother, less error‑prone security experiences.