  The emerging threats to user privacy over the internet are increasing at an
alarming rate. Signing in from an unreliable terminal into a web account may
result in compromising private details of a user such as username and password,
by means of keylogger software. Such software are capable of recording
keystrokes secretly, via covert channels without the knowledge of the user. In
this paper we propose a secure method for signing in using Quick Response (QR)
codes with mobile authentication. Through this method, the user can securely
sign-in into a web account by authenticating the user session on an unreliable
terminal browser, using a mobile device.
