4 ms·
> if you lose your password you can do a password reset I would argue that this is a negative thing. Sites should at least give the option to disable password
by dependenttypes 6y ago
> if you lose your password you can do a password reset
I would argue that this is a negative thing. Sites should at least give the option to disable password reset.
- tclancy 6y agoWhat do you do if you find your password was compromised?
- dependenttypes 6y agoI use randomly generated passwords that are unique per site. It is more likely for someone to socially engineer the site support (or the registered mail account) than to guess it. Another annoying thing is that some sites do not consider your password enough even if you do not have 2fa enabled and they insist on sending you a mail (thanks github! - I can't connect to my account there because the registered mail was in my old domain) or an sms (thanks google/twitter! I had not even provided my phone number yet somehow giving it to you will verify that it's me)
- pas 6y agoHow do you reclaim your account safely without some pre-shared unique/secret thing that identifies you as the "rightful" user? Password reset email is great if you forgot your password, but this just means you can't make it more secure than your email account.