Hello everyone, but I want to make everyone aware of this. Discord recently introduced logging in via QR code, which is pretty handy when the desktop version randomly decides to log you out.
The way this QR code login works is you scan the code from your logged in phone discord account, and the desktop discord client that created the QR code is immediately logged into that same account without additional verification, passwords, and ignoring your 2FA (in most cases the logged in phone IS the 2FA).
As you may or may not have noticed, a small exploit exists, so I'll say this upfront:
NEVER and I mean NEVER scan a QR code for Discord-related gifts or prizes, including Nitro giveaways, through the Discord mobile app, EVER. You are NOT redeeming the "prize", you're giving someone FULL access to your account, regardless of 2FA. Until Discord adds a notice to their app, you'll have to be extremely cautious about this.
PSA if you moderate a server: If you see someone posting a QR code in your server and claiming it gives Nitro, DELETE IT.
Be sure to spread the word to everyone you know. This is a serious flaw with Discord's login system, and there's probably a lot of people losing accounts to this scam.
TLDR:
Discord ****** their login system, scanning QR codes can give people full access to your account. So watch out for that, I guess.
The way this QR code login works is you scan the code from your logged in phone discord account, and the desktop discord client that created the QR code is immediately logged into that same account without additional verification, passwords, and ignoring your 2FA (in most cases the logged in phone IS the 2FA).
As you may or may not have noticed, a small exploit exists, so I'll say this upfront:
NEVER and I mean NEVER scan a QR code for Discord-related gifts or prizes, including Nitro giveaways, through the Discord mobile app, EVER. You are NOT redeeming the "prize", you're giving someone FULL access to your account, regardless of 2FA. Until Discord adds a notice to their app, you'll have to be extremely cautious about this.
PSA if you moderate a server: If you see someone posting a QR code in your server and claiming it gives Nitro, DELETE IT.
Be sure to spread the word to everyone you know. This is a serious flaw with Discord's login system, and there's probably a lot of people losing accounts to this scam.
TLDR:
Discord ****** their login system, scanning QR codes can give people full access to your account. So watch out for that, I guess.
