2 ms·
iOS allows sharing passkeys via Airdrop, I believe, and presumably 1Password also allows storing them in shared vaults? Regarding email, nothing prevents someb
by lxgr 1y ago
iOS allows sharing passkeys via Airdrop, I believe, and presumably 1Password also allows storing them in shared vaults?
Regarding email, nothing prevents somebody wanting to share an account from just forwarding the magic link to the intended recipient without clicking on it, right?
- andrewmcwatters 1y agoDepends on the magic link implementation, really. Some tie the login request to specific request details.
- lxgr 1y agoWhich would come from the person that’s trying to login, right? I don’t think I understand the problem. Person A tries to log in; B receives a magic link, does not click it but forward it to A; A clicks it and gets logged in. I’ve done this myself successfully, even with services pinning the link to A’s client IP (which is a bad idea anyway in an age of privacy proxies, CG-NATs, dynamic IPs etc.)