All the QR code needs to encode is a URL pointing to their authentication endpoint. If it's reasonably standardized, any password manager could implement it. L

All the QR code needs to encode is a URL pointing to their authentication endpoint. If it's reasonably standardized, any password manager could implement it. Login would be: * scan QR code, sees https:/ /megacorp.com/login?session=hexhexhex * Password manager asks that you want to log in with account X. * Negotiates with auth service * Website recieves your confirmed token via websocket * You're logged in. And, of course, if you don't have an account, the password manager can get you started creating one.