4 ms·
So much this. Particularly, services which insist on you logging in with a username, but can send you your username by email if/when you forget it, should suff
by Doctor_Fegg 9y ago
So much this.
Particularly, services which insist on you logging in with a username, but can send you your username by email if/when you forget it, should suffer horrid flaming death.
- jwfxpr 9y agoMy god yes. I get caught up in this with Steam maybe once a year — frequently enough that I grimace in irritation at every Steam login prompt. Repeated logins using my email address and password, increasingly obscenely expressed frustration, follow the password reset process — emailing me a reset password link, at which point I usually remember why this keeps happening and go back to login with my username. I mean, I understand that one could make a case for such a high-value target as Steam to not allow email/password pairs considering the high rate of password reuse. But I have 2FA enabled as well for heaven's sake. And I cannot believe that simply insisting on username/password pairs instead is better enough to justify it, compared to real best practice password policies. I mean jeez, how many username are just the pre-@ portion of the email address anyway??