4 ms·
I know a guy who as a matter of course sets his passwords to long random strings. When he wants to log into something, he then uses the sites’ “forgot password
by shireboy 6y ago
I know a guy who as a matter of course sets his passwords to long random strings. When he wants to log into something, he then uses the sites’ “forgot password” as his “OTP” to assign a new one, log in with it. He does not store the random string, so his password is random, he doesn’t know it. Sounds like a lot of trouble, but my point is “forgot password” can kinda be otp for those paranoid enough.
- weeboid 6y agoOTP, with extra steps :D
- motohagiography 6y agoGiven a scheme is only ever as secure as its recovery process, he's not wrong.
- newscracker 6y agoThis is fine until a platform or service decides to lock his account or permanently disable it because of frequent password reset attempts. If he’s lucky, he may be able to use a phone number connected to the account to get in. If not, then that’s the end of it. Seeing the kind of login patterns that many sites track for security reasons and how bad their judgments can be, I personally wouldn’t take such a risk.
- bvcvbuiy 6y agoI do that for some services I rarely use. That works actually fairly well.