5 ms·
Passwords can already universally be recovered through email. I wish ALL sites had this feature. It's essentially a one time password, that expires.
by overcast 8y ago
Passwords can already universally be recovered through email. I wish ALL sites had this feature. It's essentially a one time password, that expires.
- choward 8y agoExactly. The only password that really matters is the one for your email. Everything else just provides additional attack vectors.
- dogma1138 8y agoThat only works for services that do not store any sensitive data and employ costumer controller encryption, if your password is used as a cryptographic tool then it’s out of the question to use such mechanism.
- vxNsr 8y agoWhatsapp has figured out a solution to this problem. i.e. what is your Whatsapp password?
- PappaPatat 8y agoYour telephone number. So instead of something you know (password), they use something you have (phone).
- choward 8y agoThen how would you be able to reset your password? All I'm saying is that any service that allows password resets shouldn't have passwords at all.
- cozzyd 8y agoYeah, but be careful never to use an email that you might lose access to (which in principle, could be any email).
- overcast 8y agoWhat's the difference? They'll just recover your passwords either way. Secure your email password, use two factor authentication. Now you're more secure than just about any website you're using.
- cozzyd 8y agoWell, for example if you're a student and you have you@your.edu, you might lose access to that account after you graduate.