Plain mode is not encrypted. Anyone who scans the code can read the string.
Advanced mode creates one credential for this code and needs the same origin, RP ID, and credential to recover.
Encrypted code
Technical details
Recover
URL fragment payload imported.
Waiting for payload.
Recovered string
Canvas display reduces casual DOM exposure. It does not protect against a compromised browser, OS, extension, screenshot, screen recorder, or keylogger.