Sadly the article is very light on how this actually works. I'm guessing it involves setting up an authenticator on the phone (something they encourage anyway) and just using a QR code as a new way of interacting with it?