3 ms·
Most sites will require you to confirm your account before being able to do anything which involves receiving an email and clicking a link which is the same wor
by nickjj 5y ago
Most sites will require you to confirm your account before being able to do anything which involves receiving an email and clicking a link which is the same workflow as a passwordless system. I don't really see a magic link system as being worse in this regard, especially if you use cookies to persist the login. The user experience is the same except for cases where you want them to login again without a cookie, I'd make a case that using a passwordless system here is better because each time you login you are verifying that you still own the email address -- this isn't bad if it only needs to be done a few times per year. For a lot of sites it's reasonable to keep a user logged in for months at a time or even permanently.
- Tagbert 5y agoUsing email to verify the account is a one time operation and if it takes a long time to get the email, that can be endured. Having to depend on email for authentication each time is unworkable. Frequently the email never arrives or takes a long time to arrive. I would much prefer to use the passwords that I keep in a password manager and can do an immediate login without depending on email’s duct tape and bailing wire approach.
- nickjj 5y agoIt could be a near 1 time operation with magic links too. The cookie can be saved for 6 months, a year or even 20 years on your device.