Improve and expand QR code sign-in so it works from a PC
The QR code sign-in is fantastic, however, it should also allow users to sign in outside portable devices. For example, using a logged in session within the browser could improve the logging workflow experience for users with degoogled devices as the user can then only have a security key setup in their account and avoid altogether less secure forms of 2FA such as TOTP. At the moment, degoogled devices pretty much must have TOTP enabled, which is not ideal for those seeking maximum security within a degoogled ecosystem.
Amber
shared this idea
-
protablo
commented
the idea and motivations seem disconnected
the idea is QR code login for other devices such as browser login
the motivation is so you don't have to use TOTP as 2FA. 2FA such as security keys without having to set up TOTP is an idea of itself which is already on uservoice
also TOTP is not an insecure 2FA. if anything, QR codes which act like FIDO2 passkeys are as secure as TOTP since unlike FIDO passkeys, the url is not verified at time of use