Viewing profile — comma-ampersand

It's your personal identification pin number

I don't believe this requires javascript to work.

What is wrong with magic links exactly? Email already is the single point of failure, password resets. People are already used to looking at their email, account verification etc. …

You might as well email them the letters.

Since the article is about the UK it should be said that mobile carriers there do not necessarily know the name of their users.