3 ms·
Couple of points, first of all the thing the browser can still remember is the auth token in a non-expiring cookie. As the majority of users will rarely if ever
by davnicwil 9y ago
Couple of points, first of all the thing the browser can still remember is the auth token in a non-expiring cookie. As the majority of users will rarely if ever clear cookies or change browsers, this nullifies the password remembering feature.
Secondly, particularly on mobile, tapping through to email and hitting a link is probably faster and more convenient for most users than simply entering a password on the keyboard.
It's just a shame it's such a pain to write automated tests that go through the email login procedure compared to username/password ;-)
- oddlyaromatic 9y agoI used a fundraising tool recently with this kind of passwordless workflow. It's a tool that you only use once a year for about 30 days, and your authenticated session can last about that long. Which means you do the process once on each computer you use, and then you never have to remember the password the next year. It's great.