4 ms·

Okta passwords can be easily hacked, experts claim

• 8organicbits 4y ago
  > it is expected behavior when users mistakenly enter their password in the username field This is pretty common. You'd want to log the username for audit purposes. As a user, change your password when you leak it, such as via the username field. On the server side, maybe we should be checking if the provided username is the password of any account. Then lock those accounts or mark them as needing a new password on next log-in.