4 ms·
A PIN is not a password, because it only works on a device that you have already autheticated using some much more secure mechanism. if there is anywhere that
by notatoad 2y ago
A PIN is not a password, because it only works on a device that you have already autheticated using some much more secure mechanism.
if there is anywhere that you can use a PIN without additional authentication it's not a PIN, it's just shitty insecure password.
- lxgr 2y agoNot necessarily. You can securely use PINs over a protocol like SRP, as long as the backend can be trusted to perform rate limiting properly.