yeah one time passwords have been around for ages, guess why website don't use them? because users hate those. only banks got around it so far, and because the

yeah one time passwords have been around for ages, guess why website don't use them? because users hate those. only banks got around it so far, and because they made the process hassle free giving out hardware tokens. waiting for a sms confirmation sucks as a user experience and you can't guarantee fast delivery (or that the user has signal at all the time)