Create barcode for login

[mb85001]

Hi guys,

I have a question: is there a way to embed the lichess login data in a url directly in a static way?

background: we offer chess classes at an elementary school and it’s quite tedious and time-consuming having to log on every child every time again using username and password. So our idea was to create 2D barcodes for them that would contain that information.

Is there a permanent solution for that?

[kraktus]

Seeing all the scams and unwanted access similar features have created on other websites (discord only to name one) I don't think it's a good idea in practice.

[brollin]

Hi, funny to see this question posed here, since I work for Clever but am also currently doing some work for Lichess. Clever is an EdTech company that started the idea of using QR codes to login students. The product is called Badges. I've done a lot of work on Badges, and it's a good solution for the space but not necessarily a good general login solution.

Using QR codes for logging in young students makes sense considering the alternatives that commonly occur at elementary schools. Some common alternatives include teachers using one shared account and writing the credentials in a very public place like the chalkboard or in communications that went home with the students (take home flyers). In these and in similar cases, the security of the credentials is is already pretty low.

A QR code that logs someone in is similar in security level since it is essentially an image of your login credentials. So, QR codes don't offer better security necessarily than what teachers were already doing, but they do solve a host of other problems like credential distribution, ease and speed of login, and more.

I would also worry about having this feature available in any general sense on Lichess. In most cases, it would represent greatly reducing the security of someone's account. It is the rather unique case of elementary schools where credential security is already pretty low that QR codes make sense from a security perspective.

Sorry if any of that was overexplained/pedantic @mb85001, not sure about your knowledge of edtech. In case you haven't already, you might see what the school already does for an SSO solution. If you can leverage what the students already use to log in to other things, it might be easiest. In the off chance that the school uses Clever, there's definitely some kind of solution that I could help with. Just let me know!