3 ms·
See eg auth0's passwordless login via email. Given standard password flows include email-based password reset, there's really no difference in security; either
by chrisweekly 8y ago
See eg auth0's passwordless login via email.
Given standard password flows include email-based password reset, there's really no difference in security; either way, if someone owns your email, you're screwed. TFA does help mitigate this though.