Pairing a phone, the way messaging apps do it
The phone never sees a password. The web app shows a code, the phone scans it, and from that moment the phone holds its own credential — which you can withdraw again from the web without touching the phone.
Show the code
The code is valid for two minutes and can be used once. Closing the dialog expires it rather than leaving it live on a screen you walked away from.
Scan it with the app
The code is deliberately not a web link, so a general camera app cannot open it and the secret never lands in a server log or a browser history.
Carry the card offline
The paired phone holds a copy of the card, so it opens at a trade fair stand with no reception at all.
At a glance
- Pairing code lifetime
- Two minutes, usable once
- What the other person gets
- A vCard QR code — no app to install on their side
- Losing the phone
- Revoke the device from the web; the card is unaffected
- AI assistant access
- Ten tools, off until your organisation switches them on