3 ms·
The tl;Dr of this article is to email a one time login link to your users instead of having them enter a password, similar to how you reset a password on most s
by gautamnarula 9y ago
The tl;Dr of this article is to email a one time login link to your users instead of having them enter a password, similar to how you reset a password on most sites.
The main reason sites don't this is because it's a bit user unfriendly. I think a reasonable compromise is to use login with Facebook or Google so you never have to worry about passwords. There are downsides of course (user privacy concerns, dependent on third party platform), but since Persona never took off I think it's the best option. When I ran a user facing webapp I offered signing up with email/password as well as social network login, but encouraged people to use the latter.
- onli 9y agoSince you mention Persona: There is portier[0], a successor project (I'm part of the project). Login via email as default, or via your Google account for gmail addresses, and other email domains could use their own login system. [0]: https://portier.github.io/ https://portier.github.io/
- seizeheures 9y agoI personally love the idea of having users log in with a temporary token sent by email, and have been doing so in my own projects for a while now. However, I don't think sending them a link is a good idea, since it just gets them used to clicking on things in their emails, which could potentially lead them being phished quite easily.
- luord 9y agoYou make a fair point against sending links in emails, so how do you implement the token in the email? I'd like to start doing that in my own projects too.