The example they give in TFA is having the user scan a QR code, presumably from a mobile device.