6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

Device code phishing has quickly become a significant threat, evolving from a specialized technique to a large-scale issue in a short period of time. This type of phishing involves exploiting the OAuth 2.0 device authorization grant to steal access tokens. The device authorization login flow was originally designed for devices with limited input capabilities, such as smart TVs and printers. However, it has been widely adopted by various apps and use cases beyond its initial intended purpose. As a result, device code phishing has grown rapidly, becoming a notable concern. Its rapid expansion has occurred in under six months, transforming it into an industrial-scale threat.