4 ms·

I worked for a large b2c website. Many users used the password recovery flow essentially as their login mechanism. Seriously.

• lucaspiller 9y ago
  So why not take advantage of that... instead of passwords just email the user a link they need to press to login.
  • wolco 9y ago
    That is a great idea. For many people that would be quicker and a nicer work flow.
• Dylan16807 9y ago
  What's surprising about that? It's the easiest way to deal with a system where you need to log in occasionally.
• WhyNotHugo 9y ago
  Some companies understood and embraced this: Slack and auth0 can send you "login links" via email which log you right in. Remove that pesky "password" from the entire "password reset" flow. Makes perfect sense (meaning: there's clearly users making use of it).
  • x0x0 9y ago
    We did the same after realizing what was going on.