Ironically, 2025 has seen a major comeback for —but not for menus in restaurants. The new use case is air-gapped login . With rising fears of quantum computing breaking public-key encryption (even though practical quantum attacks are still 5-10 years away), security-conscious users and critical infrastructure providers have turned to QR-based one-time codes.
// Trigger browser UI for fingerprint/face scan const credential = await navigator.credentials.create({ publicKey: options });
Passkey logins are significantly faster than traditional methods. For example, TikTok reports that passkey logins take an average of 1.9 seconds—roughly 20 times faster than email or phone logins.
# 1. Generate a unique secret for the user (Store this securely in DB) # In 2025, secrets should be at least 32 bytes (256 bits) for high security. user_secret = pyotp.random_base32(length=32)
Instead of a password, the user enters their email and receives a link containing a signed token (JWT) with a short expiration.
Ironically, 2025 has seen a major comeback for —but not for menus in restaurants. The new use case is air-gapped login . With rising fears of quantum computing breaking public-key encryption (even though practical quantum attacks are still 5-10 years away), security-conscious users and critical infrastructure providers have turned to QR-based one-time codes.
// Trigger browser UI for fingerprint/face scan const credential = await navigator.credentials.create({ publicKey: options }); login codes latest 2025
Passkey logins are significantly faster than traditional methods. For example, TikTok reports that passkey logins take an average of 1.9 seconds—roughly 20 times faster than email or phone logins. Ironically, 2025 has seen a major comeback for
# 1. Generate a unique secret for the user (Store this securely in DB) # In 2025, secrets should be at least 32 bytes (256 bits) for high security. user_secret = pyotp.random_base32(length=32) // Trigger browser UI for fingerprint/face scan const
Instead of a password, the user enters their email and receives a link containing a signed token (JWT) with a short expiration.