Discord QR Code Procedure
Hey,
I recently discussed the "Scan QR-Code" feature and that it has a few security flaws.
I would suggest to change the "Scan QR-Code" in the account settings to "Scan QR-Code to log in".
Additionally I would add a new window before scanning the code which makes you aware of how this feature could be used to compromise your account and that you should only scan codes generated in your browser and to never send codes sent you by another user.
I think there is nothing wrong with the feature since it requires the unlocked phone of the account holder.
Discord even warns you already after scanning the code that you should only scan codes from your browser and to not scan codes sent you by another user.
0
Please sign in to leave a comment.
Comments
0 comments