If I’m logged in on one device, it would be nice to use that to login on another device, similar to what apps like What’s App and Discord have done.
A primary use case for facilitating 2FA to be more practical across a variety of devices. There’s really no great hardware option that works everywhere unless you’ve managed to get a USB-C exclusive ecosystem. NFC doesn’t work on the iPad or MBP, there’s no YubiKey A/C (you’d need to carry around your own adapter), there’s no A/lightning version either.
Supporting QR code would mean you could use NFC on the iPhone to login your desktop or tablet even if they don’t have NFC or any other option.
This would facilitate enabling 2FA using only a hardware token since compatibility substantially improves by proxy.
Right now in my case, I can’t rely solely on a FIDO since I don’t want to carry around 2 USB tokens for all my devices. a QR code solution would reduce that to one and allow for FIDO to be the exclusive 2FA method.
Hello Robert - welcome! I have moved your request to this existing one, even though they are not exactly identical, but gathering support under one thread and one pool of votes will garner greater collective support for this idea.
I’ll admit that I originally didn’t see the need for this, but you have provided some very compelling use-cases. I think this would be a great feature (so I have added my vote, too). Hopefully others will upvote this as well. Cheers!
There are a few libraries for C# as well which would help integrate with the mobile apps and the core codebase, but unfortunately they all seem a bit out of date.
The SQRL spec and reference implementations seems to be getting finalized now, so maybe a good opportunity to see if a C# binding could be produced now.
Would BitWarden be open to a PR to integrate support if it were provided?
Support for this sooner than later would be excellent the idea of having a single factor authentication system that isn’t password username/variant authentication is ideal. Getting the hell away from this problem ASAP really needs dealt with and I really don’t want common metadata across all of my accounts anymore so the sooner the better!
Implement a free open source secure quick and reliable login process from a trusted security Jedi!
Feature function
do away with passwords to store
Sqrl if free, absolutely secure and reliable
no passwords to store so no secrets to keep!
Related topics + references
I have been waiting a long time to suggest this solution to proving identity, if you spend some time reading over SQRL from grc.com you maybe able to implement this identity prover and add a ton of value to your growing community.
last pass have dropped the ball pick it up and score!
So, I think this particular request is actually looking for implementation of SQRL as a protocol within Bitwarden, rather than as an authentication method for one’s vault (in lieu of master password).
In that case, it is something of a duplicate of this from a few years ago, and could be merged with it: SQRL Identity
That said, I think making it also a method of identification and authentication into Bitwarden – a la Sign in using QR code without master password – in addition to SQRL identity storage for different sites is worth pursuing, particularly since many implementations already exist for client and server models.
Implement a free open source secure quick and reliable login process from a trusted security Jedi!
Feature function
do away with passwords to store
Sqrl if free, absolutely secure and reliable
no passwords to store so no secrets to keep!
Related topics + references
I have been waiting a long time to suggest this solution to proving identity, if you spend some time reading over SQRL from grc.com you maybe able to implement this identity prover and add a ton of value to your growing community.
last pass have dropped the ball pick it up and score!
Guys, I hope to help the community. Here is a list of 11 sites that talk about sqrl, here it talks about the positives and negatives of the sqrl protocol or scheme as an authentication method:
I thought about that … Is it possible to adopt a temporary master password for Qrcode?
If going to public places it would make sense to have a qr code with a temporary master password. I could be right or wrong, but I would like to know your opinion.
I think the idea of a one-time password is excellent, but I suspect this will be more than a trivial change to the Bitwarden system, given that your master password is the critical piece of information used to create the encryption key to your vault.
