These drive me up the wall. If you email me a signin code at login and offer a password reset by email, then the password is cosmetic. Just get rid of it ffs.
Comment on Logging In Was Never Supposed to Be This Complicated
Scrath@lemmy.dbzer0.com 5 days ago
There’s also websites that for some reason only request a username/e-mail and then send you a one time login code, requiring me to open my e-mail program instead of having a one click login with my password manager…
IronKrill@lemmy.ca 5 days ago
XLE@piefed.social 5 days ago
There are so many downsides to this method compared to a password manager too. There’s no encryption, email itself is a minefield when it comes to decent security practices, and I’ve often been stuck waiting for a login link to arrive before I can actually use whatever I was trying to manage.
Mora@pawb.social 4 days ago
It is literally insane. The codes/links usually only work for 10-15 minutes. If the mail fails the RFC 5321 recommends a retry interval of at least 30 minutes (for up to 4 to 5 days).