4 ms·
It seems that the EnvKey app/service does this. You only register with an email address, and if you need to log in to the app, it will email you a one time pas
by cyberferret 9y ago
It seems that the EnvKey app/service does this. You only register with an email address, and if you need to log in to the app, it will email you a one time password to use.
Nowhere near as inconvenient as it sounds - It is the sort of service that you would rarely log in to. Mainly when setting up a new server or adding a third party service to your list of environment variables on your server.
I can see that for a service that you would use several times a day (Twitter etc.) then it would be a major PITA.
- kbenson 9y ago> I can see that for a service that you would use several times a day (Twitter etc.) then it would be a major PITA. Well, even then, it depends on how long sessions last in combination with your browser cookie policy. How often do you authenticate your HN account?
- cyberferret 9y agoTrue. Long running sessions would help. There are those that would argue it is a security risk though. Even EnvKey that I mentioned above has a session cookie of some sort - I can usually use the app for several days after logging in, even if I close the app - but after that I am prompted to instigate the email with my unique login key.
- kbenson 9y agoIt would be nice if we eventually got to a point where control of whether a password was even allowed, how long your session cookies lasted, and the ability to list and invalidate all existing sessions was as common and expected as a password reset system.