2 ms·
Here is another one I've experimented with: No passwords. You get a login key in the first email we send, or you can request a new email to log in. Your email
by yesimahuman 15y ago
Here is another one I've experimented with: No passwords. You get a login key in the first email we send, or you can request a new email to log in.
Your email is the weakest link in a lot of password-based schemes anyways, but this approach is less secure and a bit confusing.
- pagekalisedown 15y agoThis is a great idea, but is it hard to implement with non-technical users?
- yesimahuman 15y agoI would just say that people aren't used to it. Also you need to decide how you want to send the email. Once on signup (long-lived token, not recommended), once a day (weird, annoying), or on demand (user gets email instead of entering password). I think it's interesting but in practice passwords are more secure and people are used to them.