diff --git a/app/app/build.gradle.kts b/app/app/build.gradle.kts
index 3d40cb7b9..7201bd957 100644
--- a/app/app/build.gradle.kts
+++ b/app/app/build.gradle.kts
@@ -207,6 +207,9 @@ dependencies {
 
     implementation(libs.jsoup)
 
+    // qr code generation for the login on TV
+    implementation(libs.zxing.core)
+
     implementation(libs.android.work)
 
     implementation(libs.countly)
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/authentication/LocalTokenServer.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/authentication/LocalTokenServer.kt
new file mode 100644
index 000000000..077b9d06c
--- /dev/null
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/authentication/LocalTokenServer.kt
@@ -0,0 +1,348 @@
+package com.github.livingwithhippos.unchained.authentication
+
+import java.io.BufferedReader
+import java.io.IOException
+import java.net.Inet4Address
+import java.net.InetAddress
+import java.net.NetworkInterface
+import java.net.ServerSocket
+import java.net.Socket
+import java.net.SocketTimeoutException
+import java.net.URLDecoder
+import java.security.MessageDigest
+import java.security.SecureRandom
+import kotlin.concurrent.thread
+import timber.log.Timber
+
+/**
+ * Minimal, temporary HTTP server used on Android TV to receive a single text value from another
+ * device on the same local network (e.g. the user's phone), since typing with a remote is painful.
+ * The authentication screen uses it for the private Real-Debrid token and the new download screen
+ * for a link or magnet. It serves a single form page and accepts one valid submission, after which
+ * it stops itself. It must also be stopped when the screen that started it is left.
+ *
+ * Security model, following what LocalSend does for its browser flows and what went wrong with
+ * always-on unauthenticated servers like the ES File Explorer one (CVE-2019-6447):
+ * - it only runs while its screen is visible, and stops itself after [SERVER_LIFETIME_MS] anyway
+ * - it binds only to the local network interface, never to all the interfaces
+ * - submissions must include the random [pin] displayed on the TV, so neither another host on the
+ *   network nor a malicious web page loaded on one (CSRF/DNS rebinding) can plant its own value
+ * - it stops after [MAX_PIN_FAILURES] wrong PINs or after the first valid submission
+ * - it never sends any data out except the static form page
+ *
+ * The value travels in plain http on the local network, which is acceptable for a short lived,
+ * PIN protected server: TLS would require a self signed certificate that phone browsers refuse.
+ *
+ * @param pages localized texts used to build the served web pages
+ * @param isValueValid decides whether a submitted value is acceptable; rejected values get the
+ *   error page and the server keeps waiting
+ * @param onValueReceived called with the submitted value, from a background thread
+ * @param onStopped called when the server stops itself (timeout, too many wrong PINs or value
+ *   received), from a background thread. Not called by [stop].
+ */
+class LocalTokenServer(
+    private val pages: Pages,
+    private val isValueValid: (String) -> Boolean,
+    private val onValueReceived: (String) -> Unit,
+    private val onStopped: () -> Unit = {},
+    /** The PIN that must be typed in the served form, to be displayed on the TV */
+    val pin: String = generatePin(),
+    /**
+     * Whether the PIN can be skipped, decided once by the caller before this server even starts
+     * (see the phone input session), rather than derived from anything the client sends per
+     * request such as a cookie: a phone's cookie jar is not something this can rely on, since each
+     * phone input starts a fresh server at a fresh address, and depending on the browser or QR
+     * scanner preview used to open it, an earlier cookie might not carry over.
+     */
+    private val trusted: Boolean = false,
+    /** Called after a first valid PIN submission, so the caller can trust later phone inputs too. */
+    private val onTrustEstablished: () -> Unit = {},
+) {
+
+    /**
+     * Localized texts for the served pages. When [linkUrl] and [linkLabel] are set, a plain link
+     * is shown above the form, e.g. the Real-Debrid token page for the authentication flow.
+     */
+    data class Pages(
+        val title: String,
+        val fieldLabel: String,
+        val pinLabel: String,
+        val submitLabel: String,
+        val successMessage: String,
+        val errorMessage: String,
+        val wrongPinMessage: String,
+        val linkUrl: String? = null,
+        val linkLabel: String? = null,
+    )
+
+    private var serverSocket: ServerSocket? = null
+
+    /**
+     * Bind the first free port in [PORT_RANGE] on the local network interface and start serving.
+     *
+     * @return the reachable http address, or null if no local network address or free port was
+     *   found
+     */
+    fun start(): String? {
+        val address = findSiteLocalAddress() ?: return null
+        val socket = bindFirstFreePort(address) ?: return null
+        socket.soTimeout = ACCEPT_TIMEOUT_MS
+        serverSocket = socket
+        thread(isDaemon = true, name = "unchained-token-server") { serve(socket) }
+        return "http://${address.hostAddress}:${socket.localPort}"
+    }
+
+    fun stop() {
+        try {
+            serverSocket?.close()
+        } catch (e: IOException) {
+            Timber.w(e, "Error closing the token server socket")
+        }
+        serverSocket = null
+    }
+
+    private fun serve(socket: ServerSocket) {
+        val deadline = System.currentTimeMillis() + SERVER_LIFETIME_MS
+        var pinFailures = 0
+        try {
+            while (!socket.isClosed) {
+                val result =
+                    try {
+                        socket.accept().use { client -> handleClient(client) }
+                    } catch (e: SocketTimeoutException) {
+                        RequestResult.NONE
+                    }
+                if (result == RequestResult.WRONG_PIN) pinFailures++
+                val quit =
+                    when {
+                        // a valid value was received, only one submission is accepted
+                        result == RequestResult.VALUE_RECEIVED -> true
+                        // too many wrong PINs, stop instead of allowing a brute force
+                        pinFailures >= MAX_PIN_FAILURES -> true
+                        // don't run forever if the screen stays open
+                        System.currentTimeMillis() > deadline -> true
+                        else -> false
+                    }
+                if (quit) {
+                    stop()
+                    onStopped()
+                }
+            }
+        } catch (e: IOException) {
+            // the server socket was closed, the serving thread ends
+            Timber.d("Token server stopped: ${e.message}")
+        }
+    }
+
+    private enum class RequestResult {
+        NONE,
+        WRONG_PIN,
+        VALUE_RECEIVED,
+    }
+
+    /** Serve a single http request: the form page on GET /, the form processing on POST / */
+    private fun handleClient(client: Socket): RequestResult {
+        return try {
+            client.soTimeout = CLIENT_TIMEOUT_MS
+            val reader = client.getInputStream().bufferedReader()
+            val requestLine = reader.readLine()?.take(MAX_REQUEST_LINE_LENGTH) ?: return RequestResult.NONE
+            var contentLength = 0
+            while (true) {
+                val line = reader.readLine() ?: return RequestResult.NONE
+                if (line.isBlank()) break
+                if (line.startsWith("content-length:", ignoreCase = true)) {
+                    contentLength = line.substringAfter(':').trim().toIntOrNull() ?: 0
+                }
+            }
+            val parts = requestLine.split(' ')
+            val method = parts.getOrNull(0).orEmpty()
+            val path = parts.getOrNull(1).orEmpty().substringBefore('?')
+
+            var result = RequestResult.NONE
+            val response: Response =
+                when {
+                    path != "/" -> Response(404, messagePage(pages.errorMessage))
+                    method.equals("GET", ignoreCase = true) -> Response(200, formPage(includePin = !trusted))
+                    method.equals("POST", ignoreCase = true) -> {
+                        val fields = readForm(reader, contentLength)
+                        val value = fields["value"]?.trim()
+                        when {
+                            !trusted && !isPinValid(fields["pin"]?.trim()) -> {
+                                result = RequestResult.WRONG_PIN
+                                Response(401, messagePage(pages.wrongPinMessage))
+                            }
+                            value.isNullOrBlank() || !isValueValid(value) ->
+                                Response(200, messagePage(pages.errorMessage))
+                            else -> {
+                                result = RequestResult.VALUE_RECEIVED
+                                onValueReceived(value)
+                                if (!trusted) onTrustEstablished()
+                                Response(200, messagePage(pages.successMessage))
+                            }
+                        }
+                    }
+                    else -> Response(405, messagePage(pages.errorMessage))
+                }
+
+            val body = response.page.toByteArray(Charsets.UTF_8)
+            val headers =
+                "HTTP/1.1 ${response.status} ${statusName(response.status)}\r\n" +
+                    "Content-Type: text/html; charset=utf-8\r\n" +
+                    "Content-Length: ${body.size}\r\n" +
+                    "Cache-Control: no-store\r\n" +
+                    "X-Content-Type-Options: nosniff\r\n" +
+                    "X-Frame-Options: DENY\r\n" +
+                    "Referrer-Policy: no-referrer\r\n" +
+                    "Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; " +
+                    "form-action 'self'\r\n" +
+                    "Connection: close\r\n\r\n"
+            client.getOutputStream().apply {
+                write(headers.toByteArray(Charsets.UTF_8))
+                write(body)
+                flush()
+            }
+            result
+        } catch (e: IOException) {
+            Timber.w(e, "Error handling a token server request")
+            RequestResult.NONE
+        }
+    }
+
+    private data class Response(val status: Int, val page: String)
+
+    private fun statusName(status: Int): String =
+        when (status) {
+            200 -> "OK"
+            401 -> "Unauthorized"
+            404 -> "Not Found"
+            else -> "Method Not Allowed"
+        }
+
+    /** Compare the submitted PIN in constant time */
+    private fun isPinValid(submitted: String?): Boolean {
+        if (submitted == null) return false
+        return MessageDigest.isEqual(submitted.toByteArray(), pin.toByteArray())
+    }
+
+    /** Read an url encoded form body into its fields */
+    private fun readForm(reader: BufferedReader, contentLength: Int): Map<String, String> {
+        if (contentLength <= 0) return emptyMap()
+        val buffer = CharArray(contentLength.coerceAtMost(MAX_BODY_LENGTH))
+        var read = 0
+        while (read < buffer.size) {
+            val r = reader.read(buffer, read, buffer.size - read)
+            if (r == -1) break
+            read += r
+        }
+        return String(buffer, 0, read)
+            .split('&')
+            .mapNotNull { field ->
+                val separator = field.indexOf('=')
+                if (separator <= 0) null
+                else
+                    try {
+                        field.take(separator) to
+                            URLDecoder.decode(field.substring(separator + 1), "UTF-8")
+                    } catch (e: IllegalArgumentException) {
+                        // malformed url encoding
+                        null
+                    }
+            }
+            .toMap()
+    }
+
+    /** Find the local network (site local) ipv4 address of this device, if any */
+    private fun findSiteLocalAddress(): InetAddress? =
+        try {
+            NetworkInterface.getNetworkInterfaces()
+                .asSequence()
+                .filter { it.isUp && !it.isLoopback }
+                .flatMap { it.inetAddresses.asSequence() }
+                .firstOrNull { it is Inet4Address && it.isSiteLocalAddress }
+        } catch (e: Exception) {
+            Timber.w(e, "Error looking for the local network address")
+            null
+        }
+
+    /** Bind the first free port of [PORT_RANGE], only on [address], not on all the interfaces */
+    private fun bindFirstFreePort(address: InetAddress): ServerSocket? {
+        for (port in PORT_RANGE) {
+            try {
+                return ServerSocket(port, BACKLOG, address)
+            } catch (e: IOException) {
+                // port already in use, try the next one
+            }
+        }
+        Timber.w("No free port found for the token server in $PORT_RANGE")
+        return null
+    }
+
+    private fun formPage(includePin: Boolean): String {
+        val link =
+            if (pages.linkUrl != null && pages.linkLabel != null)
+                // CSP only restricts what the page loads or submits, not plain link navigation
+                """<p><a href="${pages.linkUrl.escapeHtml()}" target="_blank" rel="noopener">""" +
+                    """${pages.linkLabel.escapeHtml()}</a></p>"""
+            else ""
+        // a trusted phone (already passed the PIN this session) is not asked for it again
+        val pinField =
+            if (includePin)
+                """<label for="pin">${pages.pinLabel.escapeHtml()}</label>""" +
+                    """<input type="text" id="pin" name="pin" inputmode="numeric" autocomplete="off">"""
+            else ""
+        return """
+        <!DOCTYPE html>
+        <html><head><meta charset="utf-8">
+        <meta name="viewport" content="width=device-width, initial-scale=1">
+        <title>${pages.title.escapeHtml()}</title>
+        <style>$PAGE_STYLE</style></head>
+        <body><h2>${pages.title.escapeHtml()}</h2>
+        $link
+        <form method="post" action="/">
+        <label for="value">${pages.fieldLabel.escapeHtml()}</label>
+        <input type="text" id="value" name="value" autocomplete="off" autofocus>
+        $pinField
+        <button type="submit">${pages.submitLabel.escapeHtml()}</button>
+        </form></body></html>
+        """
+            .trimIndent()
+    }
+
+    private fun messagePage(message: String): String =
+        """
+        <!DOCTYPE html>
+        <html><head><meta charset="utf-8">
+        <meta name="viewport" content="width=device-width, initial-scale=1">
+        <title>${pages.title.escapeHtml()}</title>
+        <style>$PAGE_STYLE</style></head>
+        <body><h2>${pages.title.escapeHtml()}</h2>
+        <p>${message.escapeHtml()}</p></body></html>
+        """
+            .trimIndent()
+
+    private fun String.escapeHtml(): String =
+        replace("&", "&amp;").replace("<", "&lt;").replace(">", "&gt;").replace("\"", "&quot;")
+
+    companion object {
+        /** A fresh random 6 digit PIN, generated with a cryptographically strong source */
+        fun generatePin(): String = "%06d".format(SecureRandom().nextInt(1_000_000))
+
+        // predictable ports, easy to type manually if the qr code cannot be scanned
+        private val PORT_RANGE = 8080..8100
+        private const val BACKLOG = 4
+        private const val ACCEPT_TIMEOUT_MS = 15_000
+        private const val CLIENT_TIMEOUT_MS = 5000
+        private const val SERVER_LIFETIME_MS = 10 * 60 * 1000L
+        private const val MAX_PIN_FAILURES = 5
+        private const val MAX_REQUEST_LINE_LENGTH = 2000
+        private const val MAX_BODY_LENGTH = 10_000
+        private const val PAGE_STYLE =
+            "body{font-family:sans-serif;margin:8vh auto;max-width:26em;padding:0 1em;" +
+                "background:#121212;color:#eee}" +
+                "input,button{font-size:1.1em;width:100%;box-sizing:border-box;margin-top:1em;" +
+                "padding:0.6em;border-radius:8px;border:1px solid #666;background:#1e1e1e;color:#eee}" +
+                "button{background:#7b5cd6;color:#fff;border:none}" +
+                "label{display:block;margin-top:1em}" +
+                "a{color:#a58cf0}"
+    }
+}
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/authentication/view/AuthenticationFragment.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/authentication/view/AuthenticationFragment.kt
index 5a6886b7c..bec053bdd 100644
--- a/app/app/src/main/java/com/github/livingwithhippos/unchained/authentication/view/AuthenticationFragment.kt
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/authentication/view/AuthenticationFragment.kt
@@ -9,6 +9,7 @@ import android.text.style.UnderlineSpan
 import android.view.LayoutInflater
 import android.view.View
 import android.view.ViewGroup
+import android.widget.ImageView
 import android.widget.TextView
 import androidx.fragment.app.viewModels
 import androidx.lifecycle.lifecycleScope
@@ -26,7 +27,11 @@ import com.github.livingwithhippos.unchained.utilities.extension.copyToClipboard
 import com.github.livingwithhippos.unchained.utilities.extension.getClipboardText
 import com.github.livingwithhippos.unchained.utilities.extension.getThemeColor
 import com.github.livingwithhippos.unchained.utilities.extension.hideKeyboard
+import com.github.livingwithhippos.unchained.utilities.extension.isTv
+import com.github.livingwithhippos.unchained.utilities.extension.loadQrCode
 import com.github.livingwithhippos.unchained.utilities.extension.showToast
+import com.github.livingwithhippos.unchained.utilities.tv.enablePhoneInput
+import com.google.android.material.dialog.MaterialAlertDialogBuilder
 import com.google.android.material.textfield.TextInputEditText
 import dagger.hilt.android.AndroidEntryPoint
 import kotlinx.coroutines.launch
@@ -43,6 +48,10 @@ class AuthenticationFragment : UnchainedFragment() {
     private val binding
         get() = _binding!!
 
+    // content of the TV login QR code, shown in a dialog rather than inline so it does not take
+    // up screen space until the user asks for it
+    private var loginQrCodeContent: String? = null
+
     override fun onCreateView(
         inflater: LayoutInflater,
         container: ViewGroup?,
@@ -94,6 +103,24 @@ class AuthenticationFragment : UnchainedFragment() {
 
         binding.bInsertPrivate.setOnClickListener { onSaveCodeClick(binding.tiPrivateCode) }
 
+        // typing a long token with a remote is painful: on TV the field offers a QR code icon
+        // that starts a temporary local server so the token can be sent from another device
+        binding.tfPrivateCode.enablePhoneInput(
+            scope = viewLifecycleOwner.lifecycleScope,
+            fieldLabel = getString(R.string.private_token),
+            linkUrl = API_TOKEN_URL,
+            linkLabel = getString(R.string.token_web_get_token_link),
+            errorMessage = getString(R.string.invalid_token),
+            // same minimum length checked by the manual token field
+            isValueValid = { it.length >= MIN_TOKEN_LENGTH },
+            onValueReceived = { token ->
+                _binding?.let {
+                    it.tiPrivateCode.setText(token, TextView.BufferType.EDITABLE)
+                    onSaveCodeClick(it.tiPrivateCode)
+                }
+            },
+        )
+
         activityViewModel.fsmAuthenticationState.observe(viewLifecycleOwner) {
             if (it != null) {
                 when (it.peekContent()) {
@@ -123,6 +150,8 @@ class AuthenticationFragment : UnchainedFragment() {
                         binding.cbSecret.text = getString(R.string.waiting_user_auth)
                         binding.tvUserCodeValue.text = getString(R.string.copy_code)
                         binding.bCopyLink.isEnabled = false
+                        binding.bShowLoginQrCode.visibility = View.GONE
+                        loginQrCodeContent = null
 
                         // get the authentication link to start the process
                         viewModel.fetchAuthenticationInfo()
@@ -164,6 +193,13 @@ class AuthenticationFragment : UnchainedFragment() {
                 // let the user copy the user code to enter in the website
                 binding.tvUserCodeValue.text = auth.userCode
                 binding.bCopyLink.isEnabled = true
+                // TVs have no browser and typing the link with a remote is painful: offer a QR
+                // code, scannable with a phone, behind a button instead of showing it inline
+                if (requireContext().isTv()) {
+                    loginQrCodeContent = auth.directVerificationUrl.ifBlank { auth.verificationUrl }
+                    binding.bShowLoginQrCode.visibility = View.VISIBLE
+                    binding.bShowLoginQrCode.setOnClickListener { showLoginQrCodeDialog() }
+                }
                 // update the currently saved credentials
                 activityViewModel.updateCredentialsDeviceCode(auth.deviceCode)
                 // transition state machine
@@ -254,6 +290,20 @@ class AuthenticationFragment : UnchainedFragment() {
         _binding = null
     }
 
+    /** Show the TV login QR code in a dialog instead of taking up space on the screen inline. */
+    private fun showLoginQrCodeDialog() {
+        val content = loginQrCodeContent ?: return
+        val view = layoutInflater.inflate(R.layout.dialog_qr_code, null)
+        val qrView = view.findViewById<ImageView>(R.id.ivQrCode)
+        MaterialAlertDialogBuilder(requireContext())
+            .setTitle(R.string.login_qr_code_description)
+            .setView(view)
+            .setNegativeButton(R.string.close) { d, _ -> d.dismiss() }
+            .show()
+        // load the QR only once the dialog view is attached, otherwise loadQrCode skips it
+        qrView.loadQrCode(content, viewLifecycleOwner.lifecycleScope)
+    }
+
     private fun getLoginMessage(type: Int): SpannableStringBuilder {
         val sb = SpannableStringBuilder()
 
@@ -280,8 +330,7 @@ class AuthenticationFragment : UnchainedFragment() {
 
     fun onSaveCodeClick(codeInputField: TextInputEditText) {
         val token: String = codeInputField.text.toString().trim()
-        // mine is 52 characters
-        if (token.length < 40) context?.showToast(R.string.invalid_token)
+        if (token.length < MIN_TOKEN_LENGTH) context?.showToast(R.string.invalid_token)
         else {
             // pass the value to be checked and eventually saved
             activityViewModel.updateCredentials(
@@ -298,5 +347,10 @@ class AuthenticationFragment : UnchainedFragment() {
     companion object {
         const val LOGIN_TYPE_DIRECT = 0
         const val LOGIN_TYPE_INDIRECT = 1
+
+        // same minimum used for the manual private token input, mine is 52 characters
+        private const val MIN_TOKEN_LENGTH = 40
+        // the page where the private token can be copied from
+        private const val API_TOKEN_URL = "https://real-debrid.com/apitoken"
     }
 }
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/newdownload/view/NewDownloadFragment.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/newdownload/view/NewDownloadFragment.kt
index 57e815e7c..e3b3015fc 100644
--- a/app/app/src/main/java/com/github/livingwithhippos/unchained/newdownload/view/NewDownloadFragment.kt
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/newdownload/view/NewDownloadFragment.kt
@@ -43,6 +43,7 @@ import com.github.livingwithhippos.unchained.utilities.extension.isMagnet
 import com.github.livingwithhippos.unchained.utilities.extension.isSimpleWebUrl
 import com.github.livingwithhippos.unchained.utilities.extension.isTorrent
 import com.github.livingwithhippos.unchained.utilities.extension.isWebUrl
+import com.github.livingwithhippos.unchained.utilities.tv.enablePhoneInput
 import dagger.hilt.android.AndroidEntryPoint
 import java.io.IOException
 import kotlinx.coroutines.delay
@@ -382,6 +383,27 @@ class NewDownloadFragment : UnchainedFragment() {
             } else viewModel.postMessage(getString(R.string.premium_needed))
         }
 
+        // typing a magnet or a link with a remote is the worst TV interaction in the app: on TV
+        // the field offers a QR code icon that starts a temporary local server so the link can be
+        // sent from another device, e.g. the user's phone. It only fills the field, exactly as if
+        // it had been typed: the user still presses the download or upload button themselves
+        binding.tfLink.enablePhoneInput(
+            scope = viewLifecycleOwner.lifecycleScope,
+            fieldLabel = getString(R.string.link_or_magnet),
+            errorMessage = getString(R.string.invalid_url),
+            // same checks used by the paste button
+            isValueValid = { value ->
+                value.isWebUrl() ||
+                    value.isSimpleWebUrl() ||
+                    value.isMagnet() ||
+                    value.isTorrent() ||
+                    value.split("\n").firstOrNull()?.trim()?.isWebUrl() == true
+            },
+            onValueReceived = { link ->
+                _binding?.tiLink?.setText(link, TextView.BufferType.EDITABLE)
+            },
+        )
+
         binding.bPasteLink.setOnClickListener {
             val pasteText = getClipboardText().trim()
 
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/remotedevice/view/RemoteDeviceFragment.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/remotedevice/view/RemoteDeviceFragment.kt
index e2cb0dc09..17de341b0 100644
--- a/app/app/src/main/java/com/github/livingwithhippos/unchained/remotedevice/view/RemoteDeviceFragment.kt
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/remotedevice/view/RemoteDeviceFragment.kt
@@ -9,6 +9,7 @@ import android.widget.PopupMenu
 import androidx.annotation.MenuRes
 import androidx.appcompat.app.AlertDialog
 import androidx.fragment.app.viewModels
+import androidx.lifecycle.lifecycleScope
 import androidx.navigation.fragment.findNavController
 import androidx.navigation.fragment.navArgs
 import androidx.recyclerview.selection.SelectionPredicates
@@ -22,6 +23,7 @@ import com.github.livingwithhippos.unchained.databinding.FragmentRemoteDeviceBin
 import com.github.livingwithhippos.unchained.remotedevice.viewmodel.DeviceEvent
 import com.github.livingwithhippos.unchained.remotedevice.viewmodel.DeviceViewModel
 import com.github.livingwithhippos.unchained.utilities.extension.showToast
+import com.github.livingwithhippos.unchained.utilities.tv.enablePhoneInput
 import dagger.hilt.android.AndroidEntryPoint
 
 @AndroidEntryPoint
@@ -93,6 +95,11 @@ class RemoteDeviceFragment : UnchainedFragment(), ServiceListListener {
             viewModel.fetchDeviceServices(item.id)
         }
 
+        // typing the name and address with a remote is painful: on TV both fields offer a QR code
+        // icon that starts a temporary local server so their value can be sent from another device
+        binding.tfName.enablePhoneInput(viewLifecycleOwner.lifecycleScope)
+        binding.tfAddress.enablePhoneInput(viewLifecycleOwner.lifecycleScope)
+
         binding.fabDeviceAction.setOnClickListener { showMenu(it, R.menu.device_page_action) }
 
         binding.bDeleteDevice.setOnClickListener {
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/remotedevice/view/RemoteServiceFragment.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/remotedevice/view/RemoteServiceFragment.kt
index 440e792ad..ad214159d 100644
--- a/app/app/src/main/java/com/github/livingwithhippos/unchained/remotedevice/view/RemoteServiceFragment.kt
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/remotedevice/view/RemoteServiceFragment.kt
@@ -8,6 +8,7 @@ import android.widget.ArrayAdapter
 import android.widget.AutoCompleteTextView
 import androidx.fragment.app.Fragment
 import androidx.fragment.app.viewModels
+import androidx.lifecycle.lifecycleScope
 import androidx.navigation.fragment.findNavController
 import androidx.navigation.fragment.navArgs
 import com.github.livingwithhippos.unchained.R
@@ -18,6 +19,7 @@ import com.github.livingwithhippos.unchained.databinding.FragmentRemoteServiceBi
 import com.github.livingwithhippos.unchained.remotedevice.viewmodel.DeviceEvent
 import com.github.livingwithhippos.unchained.remotedevice.viewmodel.DeviceViewModel
 import com.github.livingwithhippos.unchained.utilities.extension.showToast
+import com.github.livingwithhippos.unchained.utilities.tv.enablePhoneInput
 import dagger.hilt.android.AndroidEntryPoint
 import timber.log.Timber
 
@@ -83,6 +85,11 @@ class RemoteServiceFragment : Fragment() {
             }
         }
 
+        // typing the name and the API token with a remote is painful: on TV both fields offer a QR
+        // code icon that starts a temporary local server so their value can be sent from a phone
+        binding.tfName.enablePhoneInput(viewLifecycleOwner.lifecycleScope)
+        binding.tfApiToken.enablePhoneInput(viewLifecycleOwner.lifecycleScope)
+
         binding.bTestService.setOnClickListener {
             val username = binding.tiUsername.text.toString().trim()
             val password = binding.tiPassword.text.toString().trim()
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/remoteservice/view/CompleteServiceFragment.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/remoteservice/view/CompleteServiceFragment.kt
index 0e7000634..e47a99680 100644
--- a/app/app/src/main/java/com/github/livingwithhippos/unchained/remoteservice/view/CompleteServiceFragment.kt
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/remoteservice/view/CompleteServiceFragment.kt
@@ -8,6 +8,7 @@ import android.widget.ArrayAdapter
 import android.widget.AutoCompleteTextView
 import androidx.fragment.app.Fragment
 import androidx.fragment.app.viewModels
+import androidx.lifecycle.lifecycleScope
 import androidx.navigation.fragment.findNavController
 import androidx.navigation.fragment.navArgs
 import com.github.livingwithhippos.unchained.R
@@ -18,6 +19,7 @@ import com.github.livingwithhippos.unchained.databinding.FragmentCompleteService
 import com.github.livingwithhippos.unchained.remoteservice.viewmodel.ServiceEvent
 import com.github.livingwithhippos.unchained.remoteservice.viewmodel.ServiceViewModel
 import com.github.livingwithhippos.unchained.utilities.extension.showToast
+import com.github.livingwithhippos.unchained.utilities.tv.enablePhoneInput
 import dagger.hilt.android.AndroidEntryPoint
 import timber.log.Timber
 
@@ -82,6 +84,13 @@ class CompleteServiceFragment : Fragment() {
             }
         }
 
+        // typing the name, address and API token with a remote is painful: on TV these fields
+        // offer a QR code icon that starts a temporary local server so their value can be sent
+        // from another device, e.g. the user's phone
+        binding.tfName.enablePhoneInput(viewLifecycleOwner.lifecycleScope)
+        binding.tfAddress.enablePhoneInput(viewLifecycleOwner.lifecycleScope)
+        binding.tfApiToken.enablePhoneInput(viewLifecycleOwner.lifecycleScope)
+
         binding.bTestService.setOnClickListener {
             val username = binding.tiUsername.text.toString().trim()
             val password = binding.tiPassword.text.toString().trim()
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/repository/view/AddRepositoryDialogFragment.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/repository/view/AddRepositoryDialogFragment.kt
index c2d31f0ab..0e1b7d6c1 100644
--- a/app/app/src/main/java/com/github/livingwithhippos/unchained/repository/view/AddRepositoryDialogFragment.kt
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/repository/view/AddRepositoryDialogFragment.kt
@@ -8,15 +8,18 @@ import android.view.ViewGroup
 import android.widget.Button
 import androidx.fragment.app.DialogFragment
 import androidx.fragment.app.activityViewModels
+import androidx.lifecycle.lifecycleScope
 import com.github.livingwithhippos.unchained.R
 import com.github.livingwithhippos.unchained.repository.viewmodel.InvalidLinkReason
 import com.github.livingwithhippos.unchained.repository.viewmodel.PluginRepositoryEvent
 import com.github.livingwithhippos.unchained.repository.viewmodel.RepositoryViewModel
 import com.github.livingwithhippos.unchained.utilities.extension.isWebUrl
 import com.github.livingwithhippos.unchained.utilities.extension.showToast
+import com.github.livingwithhippos.unchained.utilities.tv.enablePhoneInput
 import com.google.android.material.dialog.MaterialAlertDialogBuilder
 import com.google.android.material.progressindicator.LinearProgressIndicator
 import com.google.android.material.textfield.TextInputEditText
+import com.google.android.material.textfield.TextInputLayout
 import dagger.hilt.android.AndroidEntryPoint
 
 @AndroidEntryPoint
@@ -39,6 +42,17 @@ class AddRepositoryDialogFragment : DialogFragment() {
 
             progressBar = view.findViewById(R.id.progressBar)
 
+            // typing a repository URL with a remote is painful: on TV offer a QR code icon that
+            // starts a temporary local server so the URL can be sent from another device
+            view
+                .findViewById<TextInputLayout>(R.id.tfAdd)
+                .enablePhoneInput(
+                    scope = lifecycleScope,
+                    fieldLabel = getString(R.string.link),
+                    errorMessage = getString(R.string.invalid_url),
+                    isValueValid = { it.isWebUrl() },
+                )
+
             view.findViewById<Button>(R.id.bTestRepoLink).setOnClickListener {
                 progressBar.isIndeterminate = true
                 viewModel.checkRepositoryLink(
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/search/view/PluginSearchFragment.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/search/view/PluginSearchFragment.kt
index 4e86b50f8..687f28afb 100644
--- a/app/app/src/main/java/com/github/livingwithhippos/unchained/search/view/PluginSearchFragment.kt
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/search/view/PluginSearchFragment.kt
@@ -7,6 +7,7 @@ import android.view.ViewGroup
 import android.widget.AutoCompleteTextView
 import android.widget.Button
 import androidx.fragment.app.viewModels
+import androidx.lifecycle.lifecycleScope
 import androidx.navigation.fragment.findNavController
 import com.github.livingwithhippos.unchained.R
 import com.github.livingwithhippos.unchained.base.UnchainedFragment
@@ -22,6 +23,7 @@ import com.github.livingwithhippos.unchained.search.viewmodel.SearchViewModel
 import com.github.livingwithhippos.unchained.utilities.extension.getThemeColor
 import com.github.livingwithhippos.unchained.utilities.extension.hideKeyboard
 import com.github.livingwithhippos.unchained.utilities.extension.showToast
+import com.github.livingwithhippos.unchained.utilities.tv.enablePhoneInput
 import com.google.android.material.chip.Chip
 import com.google.android.material.chip.ChipGroup
 import com.google.android.material.sidesheet.SideSheetDialog
@@ -233,6 +235,12 @@ class PluginSearchFragment : UnchainedFragment(), SearchItemListener {
 
     private fun setup(binding: FragmentSearchPluginsTabBinding) {
         binding.tfSearch.hideKeyboard()
+        // typing a search query with a remote is painful: on TV the field offers a QR code icon
+        // that starts a temporary local server so the query can be sent from a phone
+        binding.tfSearch.enablePhoneInput(
+            scope = viewLifecycleOwner.lifecycleScope,
+            fieldLabel = getString(R.string.search),
+        )
         binding.bPluginSettings.setOnClickListener {
             viewModel.fetchPluginsAndServices(requireContext())
         }
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/search/view/SearchFragment.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/search/view/SearchFragment.kt
index 319113e78..3e7e012aa 100644
--- a/app/app/src/main/java/com/github/livingwithhippos/unchained/search/view/SearchFragment.kt
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/search/view/SearchFragment.kt
@@ -28,7 +28,9 @@ import com.github.livingwithhippos.unchained.search.viewmodel.SearchViewModel
 import com.github.livingwithhippos.unchained.utilities.extension.delayedScrolling
 import com.github.livingwithhippos.unchained.utilities.extension.getThemedDrawable
 import com.github.livingwithhippos.unchained.utilities.extension.hideKeyboard
+import com.github.livingwithhippos.unchained.utilities.extension.isTv
 import com.github.livingwithhippos.unchained.utilities.extension.showToast
+import com.github.livingwithhippos.unchained.utilities.tv.showPhoneInputDialog
 import com.google.android.material.button.MaterialButton
 import dagger.hilt.android.AndroidEntryPoint
 import kotlin.time.Instant
@@ -73,6 +75,20 @@ class SearchFragment : UnchainedFragment(), SearchItemListener {
             findNavController().navigate(action)
         }
 
+        // typing a search query with a remote is painful: on TV show a QR code button next to the
+        // plugins button that starts a temporary local server so the query can be sent from a phone
+        if (requireContext().isTv()) {
+            binding.bSearchFromPhone.visibility = View.VISIBLE
+            binding.bSearchFromPhone.setOnClickListener {
+                showPhoneInputDialog(
+                    context = requireContext(),
+                    scope = viewLifecycleOwner.lifecycleScope,
+                    fieldLabel = getString(R.string.search),
+                    onValueReceived = { query -> _binding?.tiSearch?.setText(query) },
+                )
+            }
+        }
+
         viewModel.pluginLiveData.observe(viewLifecycleOwner) { event ->
             val plugins = event.peekContent().plugins
             val errors = event.peekContent().errors
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/utilities/extension/Extension.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/utilities/extension/Extension.kt
index a4c8cda44..78b7b8902 100644
--- a/app/app/src/main/java/com/github/livingwithhippos/unchained/utilities/extension/Extension.kt
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/utilities/extension/Extension.kt
@@ -14,6 +14,7 @@ import android.content.res.AssetManager
 import android.content.res.Configuration
 import android.content.res.Resources
 import android.database.Cursor
+import android.graphics.Bitmap
 import android.graphics.Color
 import android.graphics.drawable.Drawable
 import android.net.Uri
@@ -28,6 +29,7 @@ import android.provider.OpenableColumns
 import android.util.TypedValue
 import android.view.View
 import android.view.WindowInsetsController
+import android.widget.ImageView
 import android.widget.Toast
 import androidx.annotation.AttrRes
 import androidx.annotation.DrawableRes
@@ -46,7 +48,14 @@ import com.github.livingwithhippos.unchained.settings.view.ThemeItem
 import com.github.livingwithhippos.unchained.utilities.EitherResult
 import com.github.livingwithhippos.unchained.utilities.PreferenceKeys
 import com.google.android.material.color.DynamicColors
+import com.google.zxing.BarcodeFormat
+import com.google.zxing.EncodeHintType
+import com.google.zxing.qrcode.QRCodeWriter
 import java.util.Locale
+import kotlinx.coroutines.CoroutineScope
+import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.launch
+import kotlinx.coroutines.withContext
 import timber.log.Timber
 
 /**
@@ -532,3 +541,48 @@ inline fun <reified T : Parcelable> Bundle.parcelable(key: String): T? = when {
     SDK_INT >= 34 -> getParcelable(key, T::class.java)
     else -> @Suppress("DEPRECATION") getParcelable(key) as? T
 }
+
+// size of the QR codes shown on TV, must match the ImageView size in the layouts
+private const val QR_CODE_SIZE_DP = 200
+private const val QR_QUIET_ZONE_MODULES = 2
+
+/**
+ * Render [content] as a QR code and display it in this [ImageView], making it visible. The code
+ * is generated off the main thread on [scope], e.g. the view lifecycle scope so the work is
+ * dropped if the view is destroyed. Used on Android TV, where links cannot be opened, to hand
+ * them over to a phone.
+ */
+fun ImageView.loadQrCode(content: String, scope: CoroutineScope) {
+    val sizePx = (QR_CODE_SIZE_DP * resources.displayMetrics.density).toInt()
+    scope.launch {
+        val qrCode = withContext(Dispatchers.Default) { generateQrCode(content, sizePx) }
+        if (qrCode != null && isAttachedToWindow) {
+            setImageBitmap(qrCode)
+            visibility = View.VISIBLE
+        }
+    }
+}
+
+/** Generate a QR code [Bitmap] encoding [content], around [sizePx] pixels wide, with a quiet zone. */
+private fun generateQrCode(content: String, sizePx: Int): Bitmap? =
+    try {
+        val matrix =
+            QRCodeWriter()
+                .encode(
+                    content,
+                    BarcodeFormat.QR_CODE,
+                    sizePx,
+                    sizePx,
+                    mapOf(EncodeHintType.MARGIN to QR_QUIET_ZONE_MODULES),
+                )
+        val pixels = IntArray(matrix.width * matrix.height)
+        for (y in 0 until matrix.height) {
+            for (x in 0 until matrix.width) {
+                pixels[y * matrix.width + x] = if (matrix.get(x, y)) Color.BLACK else Color.WHITE
+            }
+        }
+        Bitmap.createBitmap(pixels, matrix.width, matrix.height, Bitmap.Config.RGB_565)
+    } catch (e: Exception) {
+        Timber.e(e, "Error generating a QR code")
+        null
+    }
diff --git a/app/app/src/main/java/com/github/livingwithhippos/unchained/utilities/tv/PhoneInput.kt b/app/app/src/main/java/com/github/livingwithhippos/unchained/utilities/tv/PhoneInput.kt
new file mode 100644
index 000000000..c2c3f705b
--- /dev/null
+++ b/app/app/src/main/java/com/github/livingwithhippos/unchained/utilities/tv/PhoneInput.kt
@@ -0,0 +1,237 @@
+package com.github.livingwithhippos.unchained.utilities.tv
+
+import android.content.Context
+import android.os.Handler
+import android.os.Looper
+import android.view.LayoutInflater
+import android.view.View
+import android.widget.ImageView
+import android.widget.TextView
+import androidx.appcompat.app.AlertDialog
+import com.github.livingwithhippos.unchained.R
+import com.github.livingwithhippos.unchained.authentication.LocalTokenServer
+import com.github.livingwithhippos.unchained.utilities.extension.isTv
+import com.github.livingwithhippos.unchained.utilities.extension.loadQrCode
+import com.github.livingwithhippos.unchained.utilities.extension.showToast
+import com.google.android.material.dialog.MaterialAlertDialogBuilder
+import com.google.android.material.textfield.TextInputLayout
+import kotlinx.coroutines.CoroutineScope
+import timber.log.Timber
+
+/**
+ * Reusable, transport only wrapper around a [LocalTokenServer]. Typing with a TV remote is painful,
+ * so on Android TV any field can offer to receive its value from another device on the same local
+ * network (e.g. the user's phone). This controller owns the server lifecycle and delivers its
+ * callbacks on the main thread; the actual PIN, QR code and address are shown by
+ * [showPhoneInputDialog]. The security properties (PIN, one shot, bounded lifetime, LAN only bind,
+ * security headers) all live in [LocalTokenServer] and are untouched here.
+ *
+ * @param pages localized texts used to build the served web pages
+ * @param isValueValid decides whether a submitted value is acceptable
+ * @param onValueReceived called on the main thread with the submitted value
+ * @param onStopped called on the main thread when the server stops itself (timeout, too many wrong
+ *   PINs or a value received). Not called by [stop].
+ */
+/**
+ * Remembers, for the rest of this app session, that the PIN has already been passed once, so later
+ * phone inputs (e.g. a second search in a row) do not ask for it again. This used to be tracked per
+ * phone via a session cookie set by the server, but a phone's cookie jar turned out not to be
+ * something we can rely on here: each phone input starts a fresh [LocalTokenServer] (a new address,
+ * since the previous one already stopped after its one accepted submission), and depending on the
+ * exact browser or QR scanner preview used to open that address, the earlier cookie might not carry
+ * over to it. Deciding trust up front, entirely on this side, sidesteps that: whether the PIN is
+ * needed is now known before the server (or the dialog showing its PIN) is even created, instead of
+ * depending on anything the phone sends back. The trust is dropped after [SESSION_TIMEOUT_MS] of
+ * inactivity, and each use slides the expiry forward. This is a single, app wide flag rather than a
+ * per phone one now, which matches how the feature is actually used (one person, one TV); every
+ * server still enforces its own one shot acceptance, short lifetime and LAN only bind regardless.
+ */
+object PhoneInputSession {
+    private const val SESSION_TIMEOUT_MS = 30 * 60 * 1000L
+    private var trustedUntil = 0L
+
+    /** True if the PIN was successfully entered within the last [SESSION_TIMEOUT_MS]; slides the expiry forward. */
+    @Synchronized
+    fun isTrusted(): Boolean {
+        val now = System.currentTimeMillis()
+        if (now > trustedUntil) return false
+        trustedUntil = now + SESSION_TIMEOUT_MS
+        return true
+    }
+
+    /** Remember that the PIN was just entered successfully, for the rest of this app session. */
+    @Synchronized
+    fun grantTrust() {
+        trustedUntil = System.currentTimeMillis() + SESSION_TIMEOUT_MS
+    }
+}
+
+class PhoneInputController(
+    private val pages: LocalTokenServer.Pages,
+    private val isValueValid: (String) -> Boolean,
+    private val onValueReceived: (String) -> Unit,
+    private val onStopped: () -> Unit = {},
+) {
+    private val mainHandler = Handler(Looper.getMainLooper())
+    private var server: LocalTokenServer? = null
+
+    /** The reachable http address of the running server, or null while it is not running */
+    var address: String? = null
+        private set
+
+    /** The PIN the phone must submit, available once [start] succeeded */
+    val pin: String?
+        get() = server?.pin
+
+    /** Whether the PIN can be skipped this time, decided once, before the server even starts. */
+    var trusted: Boolean = false
+        private set
+
+    val isRunning: Boolean
+        get() = server != null
+
+    /**
+     * Start the server. Returns the reachable address, or null if no local network address or free
+     * port was found. Callbacks are marshalled onto the main thread.
+     */
+    fun start(): String? {
+        trusted = PhoneInputSession.isTrusted()
+        val newServer =
+            LocalTokenServer(
+                pages = pages,
+                isValueValid = isValueValid,
+                onValueReceived = { value -> mainHandler.post { onValueReceived(value) } },
+                onStopped = {
+                    mainHandler.post {
+                        server = null
+                        onStopped()
+                    }
+                },
+                trusted = trusted,
+                // a first valid PIN this session skips it on later phone inputs too
+                onTrustEstablished = { PhoneInputSession.grantTrust() },
+            )
+        val started = newServer.start()
+        if (started != null) {
+            server = newServer
+            address = started
+        }
+        return started
+    }
+
+    /** Stop the server, if running. Idempotent and safe to call more than once. */
+    fun stop() {
+        server?.stop()
+        server = null
+    }
+}
+
+/**
+ * Show a dialog with the address, PIN and a QR code of a freshly started [PhoneInputController], so
+ * the user can send [fieldLabel]'s value from a phone instead of typing it with the remote. The
+ * value fills the field through [onValueReceived]; the dialog dismisses itself when a value arrives
+ * or when the server stops. Dismissing the dialog without waiting for a submission stops the server
+ * too. TV only affordances call this; the caller is expected to have gated on [Context.isTv].
+ */
+fun showPhoneInputDialog(
+    context: Context,
+    scope: CoroutineScope,
+    fieldLabel: String,
+    linkUrl: String? = null,
+    linkLabel: String? = null,
+    errorMessage: String = context.getString(R.string.phone_input_invalid),
+    isValueValid: (String) -> Boolean = { it.isNotBlank() },
+    onValueReceived: (String) -> Unit,
+) {
+    val view = LayoutInflater.from(context).inflate(R.layout.dialog_phone_input, null)
+    val addressView = view.findViewById<TextView>(R.id.tvPhoneInputAddress)
+    val pinView = view.findViewById<TextView>(R.id.tvPhoneInputPin)
+    val qrView = view.findViewById<ImageView>(R.id.ivPhoneInputQrCode)
+
+    var dialog: AlertDialog? = null
+
+    val controller =
+        PhoneInputController(
+            pages =
+                LocalTokenServer.Pages(
+                    title = context.getString(R.string.app_name),
+                    fieldLabel = fieldLabel,
+                    pinLabel = context.getString(R.string.token_web_pin_label),
+                    submitLabel = context.getString(R.string.send),
+                    successMessage = context.getString(R.string.value_web_received),
+                    errorMessage = errorMessage,
+                    wrongPinMessage = context.getString(R.string.token_web_wrong_pin),
+                    linkUrl = linkUrl,
+                    linkLabel = linkLabel,
+                ),
+            isValueValid = isValueValid,
+            onValueReceived = { value ->
+                onValueReceived(value)
+                dialog?.dismiss()
+            },
+            onStopped = {
+                // the server stopped itself: close the panel if it is still shown
+                dialog?.dismiss()
+            },
+        )
+
+    val address = controller.start()
+    if (address == null) {
+        context.showToast(R.string.phone_input_unavailable)
+        Timber.w("The phone input server could not be started")
+        return
+    }
+
+    addressView.text = context.getString(R.string.send_value_from_phone_format, address)
+    // the PIN this session was already established a moment ago, in start(); the served form
+    // will not ask for it either, so showing it here would just be confusing, unused clutter
+    if (controller.trusted) pinView.visibility = View.GONE
+    else pinView.text = context.getString(R.string.token_server_pin_format, controller.pin)
+
+    dialog =
+        MaterialAlertDialogBuilder(context)
+            .setTitle(fieldLabel)
+            .setView(view)
+            .setNegativeButton(R.string.close) { d, _ -> d.dismiss() }
+            .setOnDismissListener {
+                // dismissing without waiting for a submission must also stop the server
+                controller.stop()
+            }
+            .create()
+    dialog.show()
+    // load the QR only once the dialog view is attached, otherwise loadQrCode skips it
+    qrView.loadQrCode(address, scope)
+}
+
+/**
+ * On Android TV, add a QR code start icon to this field that opens [showPhoneInputDialog] so its
+ * value can be sent from a phone. Does nothing on phones, so it is always safe to call. By default
+ * the received value fills this field's [TextInputLayout.getEditText] and the served form label is
+ * this field's hint.
+ */
+fun TextInputLayout.enablePhoneInput(
+    scope: CoroutineScope,
+    fieldLabel: String = hint?.toString() ?: context.getString(R.string.app_name),
+    linkUrl: String? = null,
+    linkLabel: String? = null,
+    errorMessage: String = context.getString(R.string.phone_input_invalid),
+    isValueValid: (String) -> Boolean = { it.isNotBlank() },
+    onValueReceived: (String) -> Unit = { value -> editText?.setText(value) },
+) {
+    if (!context.isTv()) return
+    setStartIconDrawable(R.drawable.icon_qr_code)
+    startIconContentDescription = context.getString(R.string.type_from_phone)
+    isStartIconVisible = true
+    setStartIconOnClickListener {
+        showPhoneInputDialog(
+            context = context,
+            scope = scope,
+            fieldLabel = fieldLabel,
+            linkUrl = linkUrl,
+            linkLabel = linkLabel,
+            errorMessage = errorMessage,
+            isValueValid = isValueValid,
+            onValueReceived = onValueReceived,
+        )
+    }
+}
diff --git a/app/app/src/main/res/drawable/icon_qr_code.xml b/app/app/src/main/res/drawable/icon_qr_code.xml
new file mode 100644
index 000000000..9b5c619b5
--- /dev/null
+++ b/app/app/src/main/res/drawable/icon_qr_code.xml
@@ -0,0 +1,10 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24"
+    android:tint="?attr/colorControlNormal">
+  <path
+      android:fillColor="@android:color/white"
+      android:pathData="M3,11h8V3H3V11zM5,5h4v4H5V5zM3,21h8v-8H3V21zM5,15h4v4H5V15zM13,3v8h8V3H13zM19,9h-4V5h4V9zM19,19h2v2h-2V19zM13,13h2v2h-2V13zM15,15h2v2h-2V15zM13,17h2v2h-2V17zM15,19h2v2h-2V19zM17,17h2v2h-2V17zM17,13h2v2h-2V13zM19,15h2v2h-2V15z"/>
+</vector>
diff --git a/app/app/src/main/res/layout/dialog_phone_input.xml b/app/app/src/main/res/layout/dialog_phone_input.xml
new file mode 100644
index 000000000..8ea3d8b15
--- /dev/null
+++ b/app/app/src/main/res/layout/dialog_phone_input.xml
@@ -0,0 +1,51 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Wrapped in a scroll view: Material dialogs cap the height of their message/content area
+     based on the window size before this custom view is measured, and on some devices (seen
+     on Android TV) that cap leaves less room than the QR code needs, clipping its bottom
+     instead of showing it whole.
+
+     Unlike the NonFocusableNestedScrollView used on the details screens, this one is left
+     focusable on purpose: there is nothing else inside worth focusing (the text and the QR
+     image are both inert), so the scroll view itself must be a d-pad stop, since that is the
+     only way the standard Android arrow key handling can scroll it into view.
+
+     The address and the PIN are two separate TextViews, not one view with a manually inserted
+     line break: a single view sharing its layout pass between two logical lines was seen
+     dropping the first line's content on Android TV. -->
+<ScrollView
+    xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:fillViewport="true">
+
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:gravity="center_horizontal"
+        android:orientation="vertical"
+        android:padding="24dp">
+
+        <TextView
+            android:id="@+id/tvPhoneInputAddress"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:textAlignment="center"
+            android:textAppearance="?attr/textAppearanceBodyMedium" />
+
+        <TextView
+            android:id="@+id/tvPhoneInputPin"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:layout_marginTop="8dp"
+            android:layout_marginBottom="16dp"
+            android:textAlignment="center"
+            android:textAppearance="?attr/textAppearanceBodyMedium" />
+
+        <ImageView
+            android:id="@+id/ivPhoneInputQrCode"
+            android:layout_width="150dp"
+            android:layout_height="150dp"
+            android:contentDescription="@string/phone_input_qr_code_description" />
+
+    </LinearLayout>
+</ScrollView>
diff --git a/app/app/src/main/res/layout/dialog_qr_code.xml b/app/app/src/main/res/layout/dialog_qr_code.xml
new file mode 100644
index 000000000..4682f180a
--- /dev/null
+++ b/app/app/src/main/res/layout/dialog_qr_code.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<FrameLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="wrap_content"
+    android:layout_height="wrap_content"
+    android:padding="20dp">
+
+    <ImageView
+        android:id="@+id/ivQrCode"
+        android:layout_width="150dp"
+        android:layout_height="150dp"
+        android:contentDescription="@string/login_qr_code_description" />
+
+</FrameLayout>
diff --git a/app/app/src/main/res/layout/fragment_authentication.xml b/app/app/src/main/res/layout/fragment_authentication.xml
index 432c38940..b09e1c9b1 100644
--- a/app/app/src/main/res/layout/fragment_authentication.xml
+++ b/app/app/src/main/res/layout/fragment_authentication.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 
-<androidx.core.widget.NestedScrollView
+<com.github.livingwithhippos.unchained.utilities.NonFocusableNestedScrollView
     xmlns:android="http://schemas.android.com/apk/res/android"
     xmlns:app="http://schemas.android.com/apk/res-auto"
     android:layout_width="match_parent"
@@ -83,6 +83,7 @@
             android:layout_width="wrap_content"
             android:layout_height="wrap_content"
             android:orientation="horizontal"
+            android:gravity="center_vertical"
             android:visibility="visible"
             app:layout_constraintTop_toBottomOf="@+id/cbSecret"
             app:layout_constraintStart_toStartOf="@+id/cbLink"
@@ -107,12 +108,24 @@
                 android:enabled="false"
                 android:layout_width="wrap_content"
                 android:layout_height="wrap_content"
-                android:layout_marginEnd="30dp"
+                android:layout_marginEnd="10dp"
                 android:text="@string/copy_string"
                 />
 
-        </LinearLayout>
+            <!-- only shown on Android TV, where the authentication link cannot be opened;
+                 opens a dialog with the QR code instead of showing it inline -->
+            <Button
+                android:id="@+id/bShowLoginQrCode"
+                style="@style/Widget.Unchained.Button.Text"
+                android:layout_width="wrap_content"
+                android:layout_height="wrap_content"
+                android:layout_marginEnd="20dp"
+                android:contentDescription="@string/show_login_qr_code"
+                android:visibility="gone"
+                app:icon="@drawable/icon_qr_code"
+                />
 
+        </LinearLayout>
 
         <CheckBox
             android:id="@+id/cbToken"
@@ -200,11 +213,10 @@
             android:nextFocusLeft="@id/tfPrivateCode"
             android:nextFocusUp="@id/tfPrivateCode"
             android:text="@string/save"
-            app:layout_constraintBottom_toBottomOf="parent"
             app:layout_constraintEnd_toEndOf="parent"
             app:layout_constraintStart_toStartOf="parent"
             app:layout_constraintTop_toBottomOf="@id/tfPrivateCode" />
 
     </androidx.constraintlayout.widget.ConstraintLayout>
 
-</androidx.core.widget.NestedScrollView>
\ No newline at end of file
+</com.github.livingwithhippos.unchained.utilities.NonFocusableNestedScrollView>
\ No newline at end of file
diff --git a/app/app/src/main/res/layout/fragment_search.xml b/app/app/src/main/res/layout/fragment_search.xml
index 64bd20a24..e7a0acd1c 100644
--- a/app/app/src/main/res/layout/fragment_search.xml
+++ b/app/app/src/main/res/layout/fragment_search.xml
@@ -10,6 +10,23 @@
     android:padding="20dp"
     tools:context=".search.view.SearchFragment">
 
+    <!-- TV only: a QR code icon that starts a temporary local server so the search query can be
+         sent from a phone instead of being typed with the remote. Hidden on phones. -->
+    <Button
+        android:id="@+id/bSearchFromPhone"
+        style="@style/Widget.Unchained.Button.Text"
+        android:layout_width="wrap_content"
+        android:layout_height="wrap_content"
+        android:contentDescription="@string/type_from_phone"
+        android:nextFocusRight="@id/bManagePlugins"
+        android:nextFocusDown="@id/tfSearch"
+        android:visibility="gone"
+        app:icon="@drawable/icon_qr_code"
+        app:layout_constraintBottom_toBottomOf="@id/bManagePlugins"
+        app:layout_constraintEnd_toStartOf="@id/bManagePlugins"
+        app:layout_constraintStart_toStartOf="parent"
+        app:layout_constraintTop_toTopOf="@id/bManagePlugins" />
+
     <Button
         android:id="@+id/bManagePlugins"
         style="@style/Widget.Material3.Button.TextButton"
@@ -24,7 +41,7 @@
         app:layout_constraintEnd_toStartOf="@id/bSorting"
         app:layout_constraintHorizontal_bias="0.5"
         app:layout_constraintHorizontal_chainStyle="spread"
-        app:layout_constraintStart_toStartOf="parent"
+        app:layout_constraintStart_toEndOf="@id/bSearchFromPhone"
         app:layout_constraintTop_toTopOf="parent"
         app:layout_constraintVertical_chainStyle="packed" />
 
diff --git a/app/app/src/main/res/values-es/strings.xml b/app/app/src/main/res/values-es/strings.xml
index c95a04132..c9bd1c5d9 100644
--- a/app/app/src/main/res/values-es/strings.xml
+++ b/app/app/src/main/res/values-es/strings.xml
@@ -11,6 +11,21 @@
     <string name="obtained_user_auth">Autorización del usuario obtenida!</string>
     <string name="waiting_secret">Esperando clave secreta</string>
     <string name="waiting_token">Esperando confirmación del TOKEN</string>
+    <string name="login_qr_code_description">Escanea el código QR con tu teléfono para iniciar sesión</string>
+    <string name="show_login_qr_code">Mostrar código QR para iniciar sesión desde tu teléfono</string>
+    <string name="token_web_received">Token recibido, continúa en tu TV</string>
+    <string name="token_web_pin_label">PIN mostrado en la TV</string>
+    <string name="token_web_get_token_link">Obtén aquí tu token privado</string>
+    <string name="send">Enviar</string>
+    <string name="link_web_received">Enlace recibido, continúa en tu TV</string>
+    <string name="link_qr_code_description">Escanea el código QR con tu teléfono para enviar un enlace</string>
+    <string name="token_web_wrong_pin">PIN incorrecto, comprueba tu TV</string>
+    <string name="type_from_phone">Escribe desde tu teléfono</string>
+    <string name="send_value_from_phone_format">Envíalo desde tu teléfono abriendo %s</string>
+    <string name="value_web_received">Recibido, continúa en tu TV</string>
+    <string name="phone_input_qr_code_description">Escanea el código QR con tu teléfono para rellenar este campo</string>
+    <string name="phone_input_invalid">Valor no válido, comprueba tu TV</string>
+    <string name="phone_input_unavailable">No se pudo iniciar el servidor de entrada desde el teléfono</string>
     <string name="obtained_token">Token obtenido</string>
     <string name="waiting_link">Cargando enlace de autorización</string>
     <string name="link_loaded">Enlace de autorización cargado</string>
diff --git a/app/app/src/main/res/values-fr/strings.xml b/app/app/src/main/res/values-fr/strings.xml
index 979f9d674..07caa2433 100644
--- a/app/app/src/main/res/values-fr/strings.xml
+++ b/app/app/src/main/res/values-fr/strings.xml
@@ -11,6 +11,21 @@
     <string name="obtained_user_auth">Autorisation de l’utilisateur obtenue</string>
     <string name="waiting_secret">En attente du code secret</string>
     <string name="waiting_token">En attente du jeton de confirmation</string>
+    <string name="login_qr_code_description">Scannez le code QR avec votre téléphone pour vous connecter</string>
+    <string name="show_login_qr_code">Afficher le code QR pour se connecter depuis votre téléphone</string>
+    <string name="token_web_received">Jeton reçu, continuez sur votre TV</string>
+    <string name="token_web_pin_label">Code PIN affiché sur la TV</string>
+    <string name="token_web_get_token_link">Obtenez votre jeton privé ici</string>
+    <string name="send">Envoyer</string>
+    <string name="link_web_received">Lien reçu, continuez sur votre TV</string>
+    <string name="link_qr_code_description">Scannez le code QR avec votre téléphone pour envoyer un lien</string>
+    <string name="token_web_wrong_pin">Code PIN incorrect, vérifiez votre TV</string>
+    <string name="type_from_phone">Saisir depuis votre téléphone</string>
+    <string name="send_value_from_phone_format">Envoyez-le depuis votre téléphone en ouvrant %s</string>
+    <string name="value_web_received">Reçu, continuez sur votre TV</string>
+    <string name="phone_input_qr_code_description">Scannez le code QR avec votre téléphone pour remplir ce champ</string>
+    <string name="phone_input_invalid">Valeur invalide, vérifiez votre TV</string>
+    <string name="phone_input_unavailable">Impossible de démarrer le serveur de saisie depuis le téléphone</string>
     <string name="obtained_token">Jeton obtenu</string>
     <string name="waiting_link">Chargement du lien d’autorisation</string>
     <string name="link_loaded">Lien d’autorisation chargé</string>
diff --git a/app/app/src/main/res/values-it/strings.xml b/app/app/src/main/res/values-it/strings.xml
index 5b0e0d7cf..6803585df 100644
--- a/app/app/src/main/res/values-it/strings.xml
+++ b/app/app/src/main/res/values-it/strings.xml
@@ -11,6 +11,21 @@
     <string name="obtained_user_auth">Ottenuta autorizzazione utente</string>
     <string name="waiting_secret">In attesa del segreto</string>
     <string name="waiting_token">In attesa del codice di conferma</string>
+    <string name="login_qr_code_description">Scansiona il codice QR con il tuo telefono per accedere</string>
+    <string name="show_login_qr_code">Mostra il codice QR per accedere dal tuo telefono</string>
+    <string name="token_web_received">Codice ricevuto, continua sulla TV</string>
+    <string name="token_web_pin_label">PIN mostrato sulla TV</string>
+    <string name="token_web_get_token_link">Ottieni qui il tuo codice privato</string>
+    <string name="send">Invia</string>
+    <string name="link_web_received">Link ricevuto, continua sulla TV</string>
+    <string name="link_qr_code_description">Scansiona il codice QR con il tuo telefono per inviare un link</string>
+    <string name="token_web_wrong_pin">PIN errato, controlla la TV</string>
+    <string name="type_from_phone">Scrivi dal telefono</string>
+    <string name="send_value_from_phone_format">Invialo dal telefono aprendo %s</string>
+    <string name="value_web_received">Ricevuto, continua sulla TV</string>
+    <string name="phone_input_qr_code_description">Inquadra il codice QR col telefono per compilare questo campo</string>
+    <string name="phone_input_invalid">Valore non valido, controlla la TV</string>
+    <string name="phone_input_unavailable">Impossibile avviare il server di inserimento dal telefono</string>
     <string name="obtained_token">Codice confermato</string>
     <string name="waiting_link">Caricamento link di autorizzazione</string>
     <string name="link_loaded">Link di autorizzazione caricato</string>
diff --git a/app/app/src/main/res/values-ko/strings.xml b/app/app/src/main/res/values-ko/strings.xml
index 4de41890b..530acdaaf 100644
--- a/app/app/src/main/res/values-ko/strings.xml
+++ b/app/app/src/main/res/values-ko/strings.xml
@@ -10,6 +10,21 @@
     <string name="obtained_user_auth">사용자 승인 획득</string>
     <string name="waiting_secret">Secret 키 대기 중</string>
     <string name="waiting_token">토큰 확인 대기 중</string>
+    <string name="login_qr_code_description">휴대폰으로 QR 코드를 스캔하여 로그인하세요</string>
+    <string name="show_login_qr_code">휴대폰으로 로그인할 QR 코드 표시</string>
+    <string name="token_web_received">토큰을 받았습니다. TV에서 계속하세요</string>
+    <string name="token_web_pin_label">TV에 표시된 PIN</string>
+    <string name="token_web_get_token_link">여기에서 개인 토큰을 받으세요</string>
+    <string name="send">보내기</string>
+    <string name="link_web_received">링크를 받았습니다. TV에서 계속하세요</string>
+    <string name="link_qr_code_description">휴대폰으로 QR 코드를 스캔하여 링크를 보내세요</string>
+    <string name="token_web_wrong_pin">PIN이 올바르지 않습니다. TV를 확인하세요</string>
+    <string name="type_from_phone">휴대폰으로 입력</string>
+    <string name="send_value_from_phone_format">%s 주소를 열어 휴대폰에서 보내세요</string>
+    <string name="value_web_received">수신됨, TV에서 계속하세요</string>
+    <string name="phone_input_qr_code_description">휴대폰으로 QR 코드를 스캔하여 이 항목을 채우세요</string>
+    <string name="phone_input_invalid">잘못된 값입니다. TV를 확인하세요</string>
+    <string name="phone_input_unavailable">휴대폰 입력 서버를 시작할 수 없습니다</string>
     <string name="obtained_token">토큰 획득</string>
     <string name="waiting_link">인증 링크 로딩 중</string>
     <string name="link_loaded">인증 링크 로드됨</string>
diff --git a/app/app/src/main/res/values-tr/strings.xml b/app/app/src/main/res/values-tr/strings.xml
index bc1d1a87f..db5716d66 100644
--- a/app/app/src/main/res/values-tr/strings.xml
+++ b/app/app/src/main/res/values-tr/strings.xml
@@ -10,6 +10,21 @@
     <string name="obtained_user_auth">Kullanıcı yetkilendirmesi alındı</string>
     <string name="waiting_secret">Gizli anahtar bekleniyor</string>
     <string name="waiting_token">Jeton onayı bekleniyor</string>
+    <string name="login_qr_code_description">Giriş yapmak için QR kodunu telefonunuzla tarayın</string>
+    <string name="show_login_qr_code">Telefonunuzdan giriş yapmak için QR kodunu göster</string>
+    <string name="token_web_received">Jeton alındı, TV\'nizden devam edin</string>
+    <string name="token_web_pin_label">TV\'de gösterilen PIN</string>
+    <string name="token_web_get_token_link">Özel jetonunuzu buradan alın</string>
+    <string name="send">Gönder</string>
+    <string name="link_web_received">Bağlantı alındı, TV\'nizden devam edin</string>
+    <string name="link_qr_code_description">Bağlantı göndermek için QR kodunu telefonunuzla tarayın</string>
+    <string name="token_web_wrong_pin">PIN yanlış, TV\'nizi kontrol edin</string>
+    <string name="type_from_phone">Telefonundan yaz</string>
+    <string name="send_value_from_phone_format">Bunu %s adresini açarak telefonundan gönder</string>
+    <string name="value_web_received">Alındı, TV\'nde devam et</string>
+    <string name="phone_input_qr_code_description">Bu alanı doldurmak için QR kodunu telefonunla tara</string>
+    <string name="phone_input_invalid">Geçersiz değer, TV\'ni kontrol et</string>
+    <string name="phone_input_unavailable">Telefon giriş sunucusu başlatılamadı</string>
     <string name="obtained_token">Jeton alındı</string>
     <string name="waiting_link">Yetkilendirme bağlantısı yükleniyor</string>
     <string name="link_loaded">Yetkilendirme bağlantısı yüklendi</string>
diff --git a/app/app/src/main/res/values/strings.xml b/app/app/src/main/res/values/strings.xml
index 79bcb9032..619f91290 100644
--- a/app/app/src/main/res/values/strings.xml
+++ b/app/app/src/main/res/values/strings.xml
@@ -16,6 +16,22 @@
     <string name="obtained_user_auth">Obtained user authorization</string>
     <string name="waiting_secret">Waiting Secret</string>
     <string name="waiting_token">Waiting token confirmation</string>
+    <string name="login_qr_code_description">Scan the QR code with your phone to log in</string>
+    <string name="show_login_qr_code">Show QR code to log in from your phone</string>
+    <string name="token_web_received">Token received, continue on your TV</string>
+    <string name="token_web_pin_label">PIN shown on the TV</string>
+    <string name="token_web_get_token_link">Get your private token here</string>
+    <string name="send">Send</string>
+    <string name="link_web_received">Link received, continue on your TV</string>
+    <string name="link_qr_code_description">Scan the QR code with your phone to send a link</string>
+    <string name="token_web_wrong_pin">Wrong PIN, check your TV</string>
+    <string name="token_server_pin_format" translatable="false">PIN: %1$s</string>
+    <string name="type_from_phone">Type from your phone</string>
+    <string name="send_value_from_phone_format">Send this from your phone by opening %s</string>
+    <string name="value_web_received">Received, continue on your TV</string>
+    <string name="phone_input_qr_code_description">Scan the QR code with your phone to fill this field</string>
+    <string name="phone_input_invalid">Invalid value, check your TV</string>
+    <string name="phone_input_unavailable">Could not start the phone input server</string>
     <string name="obtained_token">Obtained token</string>
     <string name="waiting_link">Loading authorization link</string>
     <string name="link_loaded">Authorization link loaded</string>
diff --git a/app/gradle/libs.versions.toml b/app/gradle/libs.versions.toml
index 22b6c1122..3d66c55e1 100644
--- a/app/gradle/libs.versions.toml
+++ b/app/gradle/libs.versions.toml
@@ -46,6 +46,7 @@ timber = "5.0.1"
 viewpager2 = "1.1.0"
 work = "2.11.2"
 documentfile = "1.1.0"
+zxing = "3.5.4"
 
 [libraries]
 protobuf_core = { group = "com.google.protobuf", name = "protoc", version.ref = "protobuf" }
@@ -112,6 +113,7 @@ timber = { group = "com.jakewharton.timber", name = "timber", version.ref = "tim
 viewpager2 = { group = "androidx.viewpager2", name = "viewpager2", version.ref = "viewpager2" }
 android_work = { group = "androidx.work", name = "work-runtime-ktx", version.ref = "work" }
 documentfile = { group = "androidx.documentfile", name = "documentfile", version.ref = "documentfile" }
+zxing_core = { group = "com.google.zxing", name = "core", version.ref = "zxing" }
 
 [plugins]
 android_application = { id = "com.android.application", version.ref = "android_gradle_plugin" }