How do you handle 2FA?

Re:How do you handle 2FA? by PranavBerry on Wednesday October 27, 2021 @03:14AM (#29010410)

> How will a website be able to scan my phone's screen?

Using your webcam. However from the comments it seems that there are a lot of devices without a webcam so my idea will not work.

[ Parent | on HN ]

Re:How do you handle 2FA? by austinjp on Wednesday October 27, 2021 @06:50PM (#29020014)

My laptop doesn't have a webcam, and even if it did, I wouldn't permit my web browser address to it unless I really needed to. A website that asks me to access the webcam just to log in isn't going to appeal to me.

I've no idea how typical I am in this regard, though.

Could you turn the idea on its head? Could the website display the QR code and the phone scan it, as per WhatsApp and many others? Or perhaps the phone just displays the note ubiquitous "random raccoon" type wordset for the user to enter into the website?

I'm probably missing the point of your idea.

[ Parent | on HN ]

Re:How do you handle 2FA? by PranavBerry on Monday November 01, 2021 @06:36AM (#29064983)

>the website display the QR code and the phone scan it I'm exploring that right now, thx a lot.

>I'm probably missing the point of your idea.

It was mainly a way to do 2FA with a phone but no SMS/internet on phone. However it looks like TOPTs solve this probelem.

[ Parent | on HN ]

Re:How do you handle 2FA? by austinjp on Tuesday November 02, 2021 @04:31AM (#29078506)

> I'm exploring that right now, thx a lot.

No problem, good luck :) Is good to see someone experimenting in this area and asking for advice to stay on track.

[ Parent | on HN ]