Two-step verification QR codes

[Henri Watson]

While while resetting up two-factor auth today, I noticed Stripe’s two-step verification QR code URIs look like the following.

otpauth://totp/Stripe%3A%20henri%40henriwatson.com?secret=secretgoeshere

Since the QR code doesn’t specify an issuer, Google Authenticator and the like will display the account as “Stripe: [email].”

Previously, Google Authenticator only used the issuer parameter for internal disambiguation (docs). Google Authenticator 2.1.0 now displays the issuer to the user on at the top of the code box as instead of showing it with the account name.

This is a horribly trivial request but it’s something that’s bugged me as Google Authenticator doesn’t allow the user to set the issuer name.

Getting Google Authenticator to display Stripe as the issuer only requires changing the QR code URI to look like the following.

otpauth://totp/Stripe%3A%20henri%40henriwatson.com?secret=secretgoeshere&issuer=Stripe

Older clients will ignore the issuer parameter and still display Stripe as a part of the account name. Newer clients should be smart enough to remove it from the account name (Google Authenticator does, anyway).

I’ve attached a screenshot showing what Google Authenticator displays for an account with an issuer and an account without an issuer.

Keep up the awesome work!

[Aaron Christy]

Hi,

Where can I find a link to the QR code for Stripe’s two step verification?  I have been trying to use Authy (https://www.authy.com/) with Stripe and it requires a QR code, but for the life of me I couldn’t figure out where to go to get it.

Aaron

<google-authenticator-issuer.png>

--
You received this message because you are subscribed to the Google Groups "Stripe API Discussion" group.
To post to this group, send email to api-d...@lists.stripe.com.
Visit this group at http://groups.google.com/a/lists.stripe.com/group/api-discuss/.

To unsubscribe from this group and stop receiving emails from it, send an email to api-discuss...@lists.stripe.com.

[Henri Watson]

Hey Aaron,

If you head over to https://manage.stripe.com/account, you should see "Two-step verification” with an enable button in the topmost section of the General tab.

After clicking Enable and confirming you’d like to setup two-step verification, you’ll be presented with a QR code.

[Aaron Christy]

Thanks, Henri.  I already had 2fa turned on and was using google authenticator, but I wanted to switch to authy and never remembered seeing a QR code in the process because I had done it so long ago.  So, I disabled 2fa and then reenabled it and was able to get to the QR and get setup with authy.

Thanks for the suggestion!

[Michelle Bu]

Thanks for the suggestion, Henri :). I've just added Stripe as the issuer to our QR code URI.

- Michelle