6 ms·
That's essentially the same as magic links because most users won't remember/save that password and will have to rely on the usually email-based reset flow.
by account42 1mo ago
That's essentially the same as magic links because most users won't remember/save that password and will have to rely on the usually email-based reset flow.
- hombre_fatal 1mo agoSure, but this subset of user was going to otherwise reuse their password and be susceptible to cred-stuffing. The point is to stop the attack and prevent users from accidentally hosing themselves.