Unpopular opinion for a SWE?: Please don’t use “magic link” passwordless authentication for repeated logins.
-
Unpopular opinion for a SWE?: Please don’t use “magic link” passwordless authentication for repeated logins.
As a user: I can’t always access my email from that system. If I have that problem, I’m leaving your website.
As a SWE: that’s the weakest way to do passwordless auth and you’re limiting the user for options on 2FA. Even once 2FA is enabled, it’s a worse experience than passwords.
-
@jakecarpenter I hate those, they're definitely a worse experience than passwords. It's never faster than having a password manager fill the username and password, and typing the TOTP token myself.
Copyright © 2024 NodeBB | Contributors