4 ms·
> A strong, randomly generated password being given to the user and changed periodically would almost force the user to use some sort of password manager. or i
by leetcrew 8y ago
> A strong, randomly generated password being given to the user and changed periodically would almost force the user to use some sort of password manager.
or it would force them to click "reset my password" every time they use your service. now your service is only as secure as their email account.
- ilovetux 8y agoThis would be a valid concern, so I suppose that it would take an industry-wide push (which I know is unlikely) to educate users about password managers, but I would argue that if we want to improve upon the password based authentication then it would be easier to educate users if we are using a familiar interface with just one single change.
- yjftsjthsd-h 8y ago> now your service is only as secure as their email account. Surely that was already true?