How to restrict one web client with one QR code?

[Rakesh Kumar]

At the moment we are adding the users in 3cx and the user will receive an email with a QR code to set up 3cx on the device. I want that only one user can be active on one extension. now if I want to activate my 3cx to multiple devices I just need to scan the code from email and that's it.

One of our users send the QR code to one country for personal use, and we found that it was working on 5 devices. The next one of from them threat to someone and now the victim filed a case against the whole organization.

How to restrict this?

 

[TheodorosG_3CX]

The QR code is included in the Welcome email that is sent to the user. Only this specific user that has access to his email shall be using the QR code and this information should not be shared. In your case this information was shared and everyone could scan it and register to the PBX. Note that in the latest updates 7Alpha and 7BETA this behavior has been changed:
• https://www.3cx.com/blog/releases/v18u7a-alpha-security-update/
• https://www.3cx.com/blog/releases/v18u7a-beta-security-update/

In the Welcome email the QR code is no longer included and each user needs to access the Web Client, create their new strong password and scan the QR from the Web Client.

Of course if the user create a screenshot of the QR code and share you will still have the issue. At this point you can access the Management Console<<go to Users<<select the specific user and press Regenerate. Then ensure that all options are selected and scan the new QR code.