49% of workers, forced to change passwords, reuse same one with minor change

Re:49% of workers, forced to change passwords, reuse same on... by ben509 on Friday December 13, 2019 @07:46PM (#21787006)

All the QR code needs to encode is a URL pointing to their authentication endpoint. If it's reasonably standardized, any password manager could implement it.

* scan QR code, sees https:/ /megacorp.com/login?session=hexhexhex

* Password manager asks that you want to log in with account X.

* Negotiates with auth service

* Website recieves your confirmed token via websocket

* You're logged in.

And, of course, if you don't have an account, the password manager can get you started creating one.

[ Parent | on HN ]

Re:49% of workers, forced to change passwords, reuse same on... by notlukesky on Friday December 13, 2019 @08:05PM (#21787083)

SAASPASS does this as well.

https://saaspass.com/

[ Parent | on HN ]