Make QR Login Not a URL

Currently the QR Login code is a discord URL. This means that if someone malicious were to give you a nondescript QR code and you scanned it with a regular scanner, it redirects you to the discord app and starts the login process.

This makes it incredibly easy for people to fall for phishing scams if they think they are just going through some process as they did not go to their Discord settings to do a QR login. It only takes someone a split second to press the button without even realising what they're doing.

Please change the QR code to something that can only be read within the app and not by any generic QR code reader. There is no reason for the QR code to be a URL, it just makes it this much easier to get into people's accounts.

Comments