Sign up for our newsletter
you are viewing a single comment's thread
view the rest of the comments
[–] 78 points 7 months ago (10 children)

“Magic email” login is the most stupid method to me. Yeah, just make it impossible to log in with my password manager. The average person probably has the weakest password for their email anyway so if a hacker has access to their account you just made it 100% easier for them to log in.

  • source
  • hideshow 10 child comments
  • [–] 8 points 7 months ago (2 children)

    Fully agree, it's almost security theater.

    They need to offer a way for use with a password manager, maybe a slightly hidden option or detecting a really long password to stop all the extra bits.

    I forgot what the service was but it will have my user and pass, prompt the email verify, and then it will ask for the token generated in an Auth app.

    At a certain point the proper user probably can't get in

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (7 replies)