4 ms·

So does this mean one has to go into their email everytime they need to log in, or just until the cookie expires? I assume it's the latter. It's a little more

So does this mean one has to go into their email everytime they need to log in, or just until the cookie expires? I assume it's the latter. It's a little more inconvenient in the second instance that traditional password entry (given that all my passwords are saved in Chrome), but sounds a lot more secure. Especially since I use a hard gmail password and two factor authentication to access email. Would be nice to add a 'log out on all machines' link to the email with the password button as well.

WorldMaker 11y ago
Just until a session cookie expires. Session management can/should be much the same as you would expect. The benefit here for you, though, is that you get "free two factor" on these sorts of sites, without those sites having to implement it, simply because you use a two factor email. It's a rising security tide, of a sort.