3 ms·
I run a small B2C app. Users sign up with their email address only, a password field isn't even present. This creates the account and logs in the user "indefini
by WA 2y ago
I run a small B2C app. Users sign up with their email address only, a password field isn't even present. This creates the account and logs in the user "indefinitely" on this device. If they ever need to login on another device, they can request a new password. This way, this removes a) signup friction und b) weak passwords, because most people never need to login on another device anyways.
- eddd-ddde 2y agoI like the concept but at the same time I hate having to open my email to login to a site. I already have a password manager. I rather just generate a password on one go.
- lwansbrough 2y agoI agree it's inferior to a password manager but I think passkeys will usurp the role of password managers in the long term, and for everyone else who won't use either, a simple email is an easy ask -- better than having them go through password reset every time they use the site.
- WA 2y agoIt's "temporary". You can set a password later and use it to login with email + password and store it in your password manager. Only the initial signup and the first login on a new device will require the "reset password" workflow. Imho, that's the best of both worlds.
- Sammi 2y agoWhen do you ask for a password? Do users have to seek it out themselves? Can users still login using only email after setting a password?