3 ms·

I never thought of using password reset as a permanent authentication method. Ingenious! Except when the service throws you back to the login page to authentic

I never thought of using password reset as a permanent authentication method. Ingenious! Except when the service throws you back to the login page to authenticate with a fresh password you just typed in the reset form.

tptacek 2y ago
Plenty of services do this already, right? It's called "Magic link" login. Am I missing a subtlety?
- ivanjermakov 2y ago
  In my recent experience it's 50/50.