Plain mode is not encrypted. Anyone who scans the code can read the string.
Passkey mode is advanced. Use the browser prompt to choose this device, a phone, or a security key. Each code gets a new encryption key.
Passkey technical details
Origin
-
RP ID
-
Secure context
-
WebAuthn API
-
PRF check
Runs on create
Encrypted code
Technical details
Recover
Waiting for payload.
content is copied to clipboard
Recovered string
Canvas display reduces casual DOM exposure. It does not protect against a compromised browser, OS, extension, screenshot, screen recorder, or keylogger.