3 ms·

All that's in the QR code is a shared secret string, passed into the TOTP algorithm. https://en.wikipedia.org/wiki/Time-based_One-Time_Password https://en.wiki

All that's in the QR code is a shared secret string, passed into the TOTP algorithm. https://en.wikipedia.org/wiki/Time-based_One-Time_Password https://en.wikipedia.org/wiki/Time-based_One-Time_Password

gnrlst 6y ago
Yeah the QR code is not the special part. IT's the UX: 1 click and 1Password reads the QR code and adds a live authenticator code alongside your saved password, and auto-copies it to clipboard on mobile (and auto-pastes it in the 2FA field on desktop). So its like having a password manager and 2FA authenticator app rolled in one. I know it's sorta missing the point, but it's encouraging me to enable 2FA everywhere, as the hassle is now gone. (and most important sites detect when a sign on is unusual anyways).