If you don't want people to have to keep track of another password you could implement a sans password login system. 1. In the login form, ask for an email. 2

If you don't want people to have to keep track of another password you could implement a sans password login system. 1. In the login form, ask for an email. 2. When a user inputs an email, send an authenticated link to their email. This link contains an authentication key that can be used to perform a one time login (or several) to an account associated with the corresponding email. 3. If a user has logged out or needs to login from another device, simply enter your email again and receive a new authentication link (or use the email you received in the past). 4. If a user logs out, invalidate all the previously generated login URLs. Notion[1] uses this system and I like it [1] https://notion.so https://notion.so