A new method of authentication that uses SQRL could one day remove the need for user names and passwords.
Virtually every website that needs to keep its individual accounts secure uses logins and passwords to accomplish that goal, but a new system using QR codes for authentication is now suggesting that it could conveniently replace that standard.
The solution would replace the old authentication system with one that is intuitive and safe, say proponents.
The people supporting the SQRL (Secure QR Login, which uses QR codes as a part of the process) say that this helps to overcome the struggles of traditional authentication that are neither safe nor intuitive and that can allow passwords to be stolen out of databases, keyloggers, man-in-the-middle (MitM) attacks, or simple brute force. The current system is also flawed because it requires people to have to remember their login information for each site and system that they use.
Now, signing in securely could be as simple as the use of QR codes, which are increasingly familiar to consumers.
The idea to use QR codes for SQRL came from Steve Gibson, who is a well known enthusiast in the field of security, and the individual behind online projects such as Security Now! And ShieldsUP! Though he has been known to be rather controversial in his efforts, the past few weeks and the discussion of his new type of authentication system has brought a considerable amount of positive attention. In fact, it t looks as though his proposals may be starting to catch on.
To use the QR codes to log on using SQRL, is extremely easy from the side of the user. A website that has implemented the system would simply present anyone who wants to log in with one of the barcodes. This must be scanned with a desktop or smartphone app, and the site automatically logs them in without requiring a password or username.
From the side of the user, this solves nearly all of the struggles that have ever been presented by traditional password and login systems. However, what is now being investigated is whether or not QR codes will truly improve the level of security and not just make logins more convenient for users who struggle to remember and enter their logins and passwords for each system, program, and account.