Hacker News new | ask | show | jobs
by rs232 3306 days ago
My bank has been using this for a few years now, and it quickly became my preferred method of logging in. Open the bank app, scan the code, punch in a PIN on the phone and the browser bank opens almost like magic. Very easy to set up for non techies as well.

https://secure.skandiabanken.no/Authentication/QRCode

2 comments

That probably is just an second factor QR-code login, but not the same as SQRL login. In the open source SQRL standard you also have an solution to revoke your identities for each site/app and recover when your device gets stollen.
Sounds a lot better than UK banks with their stupid "enter the third, fifth and seventh characters of your password" which is frustrating
It also makes you wonder how they know what the third, fifth, or seventh characters of your password are...

I suppose they could create multiple hashes each time you change your password, but I'm not optimistic.

My UK bank requires a password and a separate secret phrase that they do the letter selection from. You need to supply the password and 3 letters from your secret phrase.

As my phrase is quite long I pretty much always end up writing it down or using an editor.... :-)

I have a lookup table in 1password as my brain can't work with indexing random strings with numbers in them easily
I suspect it may be more related to being keylogged or an equivalent, and not revealing your entire password in the process.
It's more than likely plaintext or "encrypted" (and decrypted to check if it's correct)