4 ms·

In Germany every service that you can sign up for online but requires proof of who you are uses something called "PostIdent" -- and its a service offered by the

In Germany every service that you can sign up for online but requires proof of who you are uses something called "PostIdent" -- and its a service offered by the post office where you take the form in with your passport (or ID card) and they punch all the details in the computer and 'verify' it's you. In a (more) secure future, I see this being the real password recovery mechanism. The other technique used by online banks etc... is to send your password reset to you by mail. This assumes that physical mail to your registered address is more secure than online quizzes. I think both of these options will become the standard for anything where security matters.

kogepathic 11y ago
This is a good idea,and I too can see it happening in the future. A few problems though: 1) PostIdent isn't free. You might not be paying for it, but someone is. Also that random forum you signed up for in Singapore? Doubt they're going to support password recovery via PostIdent. 2) What happens if you need to reset your login while you're travelling. I have had it happen before that a password is forgotten or not available and I really need to login (e.g. to retrieve the ticket) and a password reset to my email address is the most expedient method.
- germanier 11y ago
  Since about half a year video ident is gaining traktion, which is basically the same but via video chat. Still not free but probably cheaper, less effort on your side and usable while travelling (as long as you don't loose your passport). I think Revolut and some other services even use the NFC chip in passports (yes, it can be read by regular smartphones) to identify you almost automatically.
- Eridrus 11y ago
  Using U2F doesn't mean you can't have a fallback to email. There will likely be a "I lost me U2F token" reset on websites which allow you to register a new U2F token/password. Personally I'm not holding my breath though, people hate extra steps and don't even use password managers when companies pay for them. In the corporate space I feel like they compete with 2FA and it's not obvious this will come out on top in most environments.

kogepathic 11y ago

This is a good idea,and I too can see it happening in the future. A few problems though: 1) PostIdent isn't free. You might not be paying for it, but someone is. Also that random forum you signed up for in Singapore? Doubt they're going to support password recovery via PostIdent. 2) What happens if you need to reset your login while you're travelling. I have had it happen before that a password is forgotten or not available and I really need to login (e.g. to retrieve the ticket) and a password reset to my email address is the most expedient method.

germanier 11y ago
Since about half a year video ident is gaining traktion, which is basically the same but via video chat. Still not free but probably cheaper, less effort on your side and usable while travelling (as long as you don't loose your passport). I think Revolut and some other services even use the NFC chip in passports (yes, it can be read by regular smartphones) to identify you almost automatically.
Eridrus 11y ago
Using U2F doesn't mean you can't have a fallback to email. There will likely be a "I lost me U2F token" reset on websites which allow you to register a new U2F token/password. Personally I'm not holding my breath though, people hate extra steps and don't even use password managers when companies pay for them. In the corporate space I feel like they compete with 2FA and it's not obvious this will come out on top in most environments.