4 ms·
I play a japanese gacha game and there is no password there for your account. If you want to login they send you a code to your email and then you use that (val
by haunter 3y ago
I play a japanese gacha game and there is no password there for your account. If you want to login they send you a code to your email and then you use that (valid for 30 seconds). I'm not a security expert but I always liked that for some reason
- crote 3y agoThe problem is that email is not guaranteed to arrive in 30 seconds. Speaking from experience, it is extremely frustrating trying to access a resource and being unable to do so because someone in the entire email chain did a transient whoopsie.
- lolinder 3y agoYep. And it's often not solvable by just sending the email again: I've more than once found cases where an app's email provider is particularly slow and the tokens arrive late no matter how many times I send them. Bonus points if each email has a new token and only the most recent one is valid, because then you're stuck trying to remember how many times you clicked the "email me" button. Is this the right token, or am I waiting for one more to come in?
- weinzierl 3y agoI use two services that do the same, so it is not completely uncommon. Both services don't require frequent login, though. One service is a DNS provider and the other a learning platform where the primary way of interaction doesn't require a login at their platform.
- HoppyHaus 3y agoThose are called "magic links"
- drpixie 3y agoI know plenty of people who use that approach for all but their most used accounts ... just click on the "reset password" link, use it, and forget the new password! It works but it's incredibly heavyweight. For every login you use an entire email infrastructure, doing all the email "security" processes. That a great deal of work.
- eviks 3y agoBesides other mentioned issues, you can't automate inserting passwords from emails like you can with a password manager