4 ms·
That's the point that I see as well. It's like if they get your email they will be able to get your user/password account anyways. So this seems like a decent w
by hoffs 9y ago
That's the point that I see as well. It's like if they get your email they will be able to get your user/password account anyways. So this seems like a decent way of getting rid of the password.
- rasengan 9y agoWhen user password are used for security, proper services have additional questions (in other words 2FA) to reset your password by email.
- WorldMaker 9y agoAdditional questions are bonus passwords. They are not 2FA.
- rasengan 9y agoAlso want to add incase anyone is reading that you don't want to set your systems security based on some lowest denominator that you can't even secure / control. Seems unreasonable and insecure.