Yes, users acceptation is a really big deal. I'm not sure how to tackle that. I guess that if the users had the option before and don't have it now, they'll com

Yes, users acceptation is a really big deal. I'm not sure how to tackle that. I guess that if the users had the option before and don't have it now, they'll complain. And when I think about the way you login to slack... "Also, you are not adding any security per se, because you are delegating it to the user's email provider." I think I do. In my case, I need an email and a way to recover the password. So, if the users email account is compromised, the account on my website is compromised too. Anything I do will only add potential breaches to the ones already existing in the users email provider ; not fix them.