Verizon has developed a QR code login that allows users to scan a QR code on a participating website with their smartphone to gain access to the site or application in an attempt to bypass the security problems that arise as a result of authentication based on using usernames and passwords.
“Lost and stolen passwords remain the No. 1 way that systems are compromised,” said Tracy Hulver, chief identity strategist for Verizon. “We continue to see user names and passwords fail as a secure way to log in, no matter how complex the password. With Verizon’s QR code login, we are making progress in protecting users without increasing the hassle, headache or expense for the user and the enterprise.”
Users will be able to enrol for a Verizon Universal ID directly from a participating Web page. After registering, users can download to their smartphone a mobile app that scans a dynamically generated QR code on the login page. Once the user’s identity is confirmed, he or she is authenticated to the website.
According to the “Verizon 2014 Data Breach Investigations Report,” two out of three data breaches are attributable to lost or stolen user names and passwords, or both.