Feature request: Use the phone camera to scan OTP QR codes for Jade Core

Open
#344 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
45/100
Issue type
Feature
Clarity
Mostly clear
Activity status
Active
Domain
authentication, mobile-dev, security

Research direction

Start by locating the existing register_otp RPC and the mobile app's Jade connection path, then trace how OTP URIs and on-device confirmation are handled. Check the USB and Bluetooth paths mentioned in the issue before determining where camera scanning or URI pasting belongs. Done means an OTP QR code can be imported through the app, reviewed on Jade, and saved without exposing the secret to photos, logs, analytics, or cloud services.

Written by the indexing model from the issue text.

Description

Hi Blockstream team,

I recently purchased a Jade Core, which does not have a built-in camera. I would like to use its OTP/2FA functionality, but under Options > Authentication > OTP > New OTP, my device only offers “Enter URI”.

Manually entering a full otpauth:// URI using the device buttons is very tedious and easy to get wrong, especially when it contains a long secret and additional parameters.

Could you please add an option in the Blockstream mobile app to scan an OTP setup QR code using the phone’s camera and import it into the connected Jade Core?

The proposed flow would be:

  1. Connect and unlock Jade Core through the mobile app.
  2. Scan the service’s OTP setup QR code with the phone.
  3. Send the decoded OTP details to Jade over the supported USB or Bluetooth connection.
  4. Review and confirm the account details on Jade before saving the record and generating OTP codes.

Pasting an OTP URI into the mobile app would also be a useful alternative.

Jade already appears to expose a register_otp RPC accepting an otpauth URI. Could the app reuse this capability while keeping the existing on-device confirmation?

Since the phone would handle the OTP secret during import, please avoid saving it to photos, logs, analytics, or cloud services.

This would make OTP setup much more practical for Jade Core owners. If an existing supported workflow already allows this, please point me to it.

Thank you!

Dominant language
C
Stars
497
Forks
131
No merged PRs in 30d

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from Blockstream/Jade

All issues in Blockstream/Jade

Similar issues

More C issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.