4 ms·

I'm still not sure why most services don't default to just mailing you a one time, short lived login link.

• sametmax 8y ago
  Because my password manager is faster than checking mail. Because spam. Because people change mails and may forget to let you know. Because bots scan emails and they are mostly in clear text.
  • jacquesm 8y ago
    > Because bots scan emails and they are mostly in clear text. If the password reset email goes through the same route then this doesn't matter. It's essentially a 'password reset' with every login. And because they are short lived you'd expect that if they had been used already that there would be no re-use possible, which would mean the attacker would have to be super fast and the victim would immediately know they were under attack.
    • sametmax 8y ago
      No you would mostly use it for phishing.
  • Freak_NL 8y ago
    Also because I don't necessarily use the same email address for each site.