3 ms·
What? The same way that when you look at the 2fa codes in your app you know which account they are associated with. The qr codes people typically scan for that
by freehorse 2y ago
What? The same way that when you look at the 2fa codes in your app you know which account they are associated with. The qr codes people typically scan for that do not just contain the seed itself but metadata for the account associated with it like email address or account name.
- hiatus 2y agoI had a similar concern when I used a random app for TOTP on my garmin watch, but was relieved when I considered the point I raised. To add codes to the watch you have to paste a seed into an app, and it couldn't be triggered from a QR code. I didn't realize the scan for 2fa had so much info.