3 ms·
Which isn't even that bad of an idea. Some website basically use this as the only way to log in.
by tty2300 7y ago
Which isn't even that bad of an idea. Some website basically use this as the only way to log in.
- erichurkman 7y agoSlack does this exceptionally well. If you forget which accounts you have, you can put in an email address and it will email you a list of your Slack accounts. If you forget your password, you can get a magic link that automatically signs in through a deep link into the app, no password needed.
- delusional 7y agoIt's such a cool idea. If you can reset your password using only your email, there's no security reason you can't just log in with it. It might even be better, since you can then add more annoying steps to the password reset strategy.
- lowkeyokay 7y agoBut Slack then must rely on the security of your email. If the site is dealing with sensitive information like credit cards, this could be a no go.
- rocqua 7y agoAny site that has a "enter your email for a reset link" feature relies on your email security.
- tty2300 7y agoAlmost every website in existence except the most security sensitive like bank websites will allow you to reset your password with email.
- nkrisc 7y agoWhat email based log in that doesn't use 2FA doesn't ultimately rely on the security of your email?