3 ms·
Seriously, the QR is just a URI that any QR reader can decode (preferably one you trust). https://github.com/google/google-authenticator/wiki/Key-Uri-Format ht
by cyanawesome 4y ago
Seriously, the QR is just a URI that any QR reader can decode (preferably one you trust).
https://github.com/google/google-authenticator/wiki/Key-Uri-Format https://github.com/google/google-authenticator/wiki/Key-Uri-...
- monocasa 4y agoAnd not just that, but TOTP isn't based on public/private crypto, but instead a shared secret embedded in plaintext in that URI.
- deleted 4y ago[deleted]