3 ms·
Please do not paste your secrets into any website as proposed here for conversion.
by mkesper 4y ago
Please do not paste your secrets into any website as proposed here for conversion.
- cyanawesome 4y agoSeriously, the QR is just a URI that any QR reader can decode (preferably one you trust). https://github.com/google/google-authenticator/wiki/Key-Uri-Format https://github.com/google/google-authenticator/wiki/Key-Uri-...
- monocasa 4y agoAnd not just that, but TOTP isn't based on public/private crypto, but instead a shared secret embedded in plaintext in that URI.
- deleted 4y ago[deleted]