Hacker News new | ask | show | jobs
by eugene_pirogov 3306 days ago
This is actually implemented in the biggest bank of Ukraine, PrivatBank.

1. Open login page https://www.privat24.ua on the computer, you'll see a QR code,

2. Take your phone, open bank's official Privat24 app,

3. Within the app select "Scan QR code",

4. Upon scanning, the page on the computer is reloaded and you are presented with the dashboard.

Very convenient. I wish more services across the internet would provide the same means to log in (although, of course not every one service can afford having a dedicated mobile app).

5 comments

Sounds awesome, whereas my German bank still doesn't allow proper passwords, only "PINs" no longer than 5 characters.

Fun fact, you can change your login though, it can be 15 characters including non-alphanumeric. /s

Which German bank is that?
Stadtsparkasse München - and I'm not sure if the other Sparkassen are better. Maybe some are, you never know what exactly they share and what's different.
I know about one. Three other banks where I have accounts, users are allowed to use passwords with a maximum length of 16 characters, which are also restricted in the way that you cannot choose freely. Things like & or { are usually forbidden.
WhatsApp does this too but I don't think its the same as SQRL, as it is a 3rd party doing the work.
That probably is just an QR-code login, but not the same as SQRL login. In the SQRL standard you also have an solution to revoke your identities for each site/app and recover when your device gets stollen.
Yandex.Key too https://yandex.com/support/passport/authorization/twofa-on.h...

but I'm like 99% sure it's a proprietary protocol, not SQRL

Is there another way to log in? I don't have a smartphone so I would be excluded from that.
The use of a phone and the scanning of a QR code when using SQRL has been recently relegated to an edge case. The vast majority of users will never do so. SQRL has its own sqrl:// schema.