Developing Secure MFA through QR code, SHA-256 OTP & Device Verification

This paper addresses the requirement for a user-friendly and secure way to authenticate web-based applications. Traditional username and password systems have been shown to be vulnerable to a number of security risks, such as phishing attempts and password guessing. It suggests integrating QR code scanning and one-time password (OTP) generation to address these difficulties. The problem statement emphasizes the shortcomings of conventional authentication techniques and the need to put into practice a more practical solution. The suggested process entails using PHP and Android Studio to create a web-based system and a mobile application, respectively. The results show that the integrated authentication system considerably improves user experience and security. OTP generation gives an added level of security while QR code scanning offers secure authentication. The robustness and efficiency of the system are evaluated by thorough unit testing, security testing, and performance evaluation. Its importance arises from its potential to address security issues and enhance the usability of authentication systems. The solution provides improved defense against typical security risks by combining QR code scanning and OTP creation. In conclusion, the system helps the user to login their account securely as it helps to prevent user from hacker’s attack that might steal their credentials as it provides a complex password technique.