3 ms·
One thing worth noting is that often, you don't even need to store passwords. If a user wishes to log in, you send them a link/code by email. That increases se
by miki123211 6y ago
One thing worth noting is that often, you don't even need to store passwords.
If a user wishes to log in, you send them a link/code by email. That increases security dramatically, as most email services already have some more advanced protections built-in. You also don't have to worry about leaks that much, as there are just no passwords to be leaked.
- viraptor 6y agoPlease don't do that. It makes me very angry when I'm trying to quickly get some information from a public/shared device and instead of getting logged in, I get a link on my device. (which I need to retype / send / ...) Most likely I don't care about the security of the account that much in that case. But my email login never goes anywhere close a device I don't own. Don't annoy users. Just let them log in.
- nkristoffersen 6y agoTo be fair, that scenario is increasing security. Shared/public devices are not considered secure at all.