The iOS password manager also works in properly designed apps as well. Websites and apps must test themselves with the popular password managers and ensure it

The iOS password manager also works in properly designed apps as well. Websites and apps must test themselves with the popular password managers and ensure it is a smooth experience — otherwise they are being security hostile. The other dumb thing is forcing there to be a password for an account. If I reset my password via an email reset, just let me click on a link to login into the app (ensure things like deep linking into apps work). A one time token is way better than any password. Let me go through that flow on multiple devices without resetting the first device. Send me an email every time a new device receives a sign in. If email is weakest link (password reset) don’t make me even less secure by requiring me to dream up another password. Now there are two vectors to crack me.