Smart-ID+ no longer asks users to enter a personal code on the website; the login session is linked to the Smart-ID app via QR code scan or direct app-to-app connection.
Kuidas uus Smart-ID+ mind pettuste eest kaitseb? - Smart-ID ↗
What happened
- In QR login, the user scans the dynamic QR code in the Smart-ID app and confirms with PIN1.
- In app-to-app login on the same phone, the Smart-ID app opens automatically and the user confirms with PIN1 without entering a personal code.
Why it matters to Signicat
- The flow is a passwordless-style authentication feature that competes with Signicat authentication offerings on phishing resistance claims; the source makes no independent test claim.
Evidence from the source (3 quotes)
- “ava Smart-ID rakendus, skaneeri kood rakenduse sees oleva kaameraga ning kinnita PIN1-ga.” source ↗
- “Smart-ID rakendus avaneb automaatselt ning saad sisselogimise kinnitada PIN1-ga — isikukoodi sisestamine ei ole vajalik.” source ↗
- “Need meetodid muudavad sisselogimise kiiremaks, mugavamaks ja paremini kaitstuks õngitsuspettuste eest.” source ↗
Authentication passwordlessFraud deepfake injectionFeature updateGlobal
3 of 3 facts verified against the source · confidence high · claude-haiku-5-5