3 ms·
The 100 most popular passwords should already be blacklisted during registration, so it wouldn't be possible to set them as your password. I have nothing again
by aaaaaaaaaaab 4y ago
The 100 most popular passwords should already be blacklisted during registration, so it wouldn't be possible to set them as your password.
I have nothing against password-reset-as-authentication aka "magic links", when done properly. And by properly I mean not using an ultra-low entropy auth code, like the parent is proposing (6 decimal digits, aka 20 bits of entropy).