What do you think of Scan QR to Login as a Service?

#1

Post by PranavBerry » Sun, Nov 07, 2021, 8:53 AM UTC

I'm Ideating on offering Scan QR Code to Login as a Service.

How it works? 1. Add your account to my authenticator app. 2. Whenever you need to sign-in, scan the QR code displayed on the website from my authenticator app. 3. Enter your device pin or use TouchId/FaceId and you will be logged in on the website.

My service will manage the generation of the QR codes, the authenticator app, etc. I also think 2FA will not be needed when using this as my authenticator app will check two factors - 1. If the request is being made from the device which the users posses. 2. The passcode/biometrics of the phone.

I think my service will be really useful for no-code/low code websites as well as websites which do not have a native mobile app. Please let me know what you think about this idea.

PS - I'm not sure if it's ok to post this on HN, please let me know if it's not ok and I'll take it down.

Re: What do you think of Scan QR to Login as a Service?

#2

Post by ryoryomaru » Sun, Nov 07, 2021, 9:03 AM UTC

I agree with password-less.

Re: What do you think of Scan QR to Login as a Service?

#3

Post by PranavBerry » Sun, Nov 07, 2021, 9:17 AM UTC

ryoryomaru wrote: post #2

I agree with password-less.

>agree with password-less.

Does my idea sounds like something you would use? Will you download a authenticator app to avoid using user/pass?

Re: What do you think of Scan QR to Login as a Service?

#4

Post by 1cvmask » Sun, Nov 07, 2021, 10:03 AM UTC

Saas pass has a scan barcode login (with 2fa) option. You can configure any of the mfa methods you want from the developer api. Good luck with your venture.

Re: What do you think of Scan QR to Login as a Service?

#5

Post by Raed667 » Sun, Nov 07, 2021, 11:23 AM UTC

PranavBerry wrote: post #3

ryoryomaru wrote: post #2

I agree with password-less.

>agree with password-less. Does my idea sounds like something you would use? Will you download a authenticator app to avoid using user/pass?

I'm not sure as a user I'll use another Authenticator app just for a random website.

It has to be for something worth the trouble (work, bank, etc...)

Re: What do you think of Scan QR to Login as a Service?

#6

Post by kingkongjaffa » Sun, Nov 07, 2021, 11:43 AM UTC

PranavBerry wrote: post #3

ryoryomaru wrote: post #2

I agree with password-less.

>agree with password-less. Does my idea sounds like something you would use? Will you download a authenticator app to avoid using user/pass?

I already have a Msft Authenticator and a Google one installed on my phone, if you can make it work with one of these already that would be fine.

Re: What do you think of Scan QR to Login as a Service?

#7

Post by _trackno5 » Sun, Nov 07, 2021, 1:00 PM UTC

You should take a look at LoginID: https://loginid.io/

The idea of using QR codes is interesting too. The downside of WebAuthn is that the credentials generated by Touch ID/Face ID are associated with a single device. If you want to log in from somewhere else, it doesn't work.

You could, however, use your QR code idea to have the user scan it from their enrolled device (e.g., phone) and then log them in.

Re: What do you think of Scan QR to Login as a Service?

#8

Post by PranavBerry » Sun, Nov 07, 2021, 4:08 PM UTC

kingkongjaffa wrote: post #6

PranavBerry wrote: post #3

Earlier quoted context omitted.

>agree with password-less. Does my idea sounds like something you would use? Will you download a authenticator app to avoid using user/pass?

I already have a Msft Authenticator and a Google one installed on my phone, if you can make it work with one of these already that would be fine.

>have a Msft Authenticator and a Google one I think you can just add all accounts to one authenticator.

>make it work with one of these These authenticators, have no support for QR codes so this would not be possible.

Re: What do you think of Scan QR to Login as a Service?

#9

Post by PranavBerry » Sun, Nov 07, 2021, 4:10 PM UTC

Raed667 wrote: post #5

PranavBerry wrote: post #3

Earlier quoted context omitted.

>agree with password-less. Does my idea sounds like something you would use? Will you download a authenticator app to avoid using user/pass?

I'm not sure as a user I'll use another Authenticator app just for a random website. It has to be for something worth the trouble (work, bank, etc...)

Got it, but there will still be a network effect.

You will just have to download it once and can add and manage accounts on a lot of websites.

Re: What do you think of Scan QR to Login as a Service?

#10

Post by wikibob » Mon, Nov 08, 2021, 7:32 AM UTC

_trackno5 wrote: post #7

You should take a look at LoginID: https://loginid.io/ The idea of using QR codes is interesting too. The downside of WebAuthn is that the credentials generated by Touch ID/Face ID are associated with a single device. If you want to log in from somewhere else, it doesn't work. You could, however, use your QR code idea to have the user scan it from their enrolled device (e.g., phone) and then log them in.

Apple PassKey syncs the WebAuthN tokens between devices.