That's not a bad idea considering scanning screenshots of QR codes is an active phishing method. Steam for example will give you a questionnaire to spot phishing attempts if you have an IP address in a different city to the device that generated the code.
If you work in some hyper secure business that has custom laptops without bluetooth then you should use usb keys or any other of the ways to use passkeys without the phone method.
I’ve run into this issue multiple times, no custom hardware involved. Just virtual machines that didn’t support Bluetooth, and physically distant computers I was controlling remotely.
Wait, why would Bluetooth be required for this flow?
It's demanded by the standard to check whether the devices are in physical proximity. And BT LE is the chosen method.
That's not a bad idea considering scanning screenshots of QR codes is an active phishing method. Steam for example will give you a questionnaire to spot phishing attempts if you have an IP address in a different city to the device that generated the code.
If you work in some hyper secure business that has custom laptops without bluetooth then you should use usb keys or any other of the ways to use passkeys without the phone method.
I’ve run into this issue multiple times, no custom hardware involved. Just virtual machines that didn’t support Bluetooth, and physically distant computers I was controlling remotely.