71–76 of 76 posts
Earlier quoted context omitted.
In this day and age, you should not login to anything from someone else's PC.
In this day and age, you should not login to anything from someone else's PC. There are a lot of occupations where you don't have your own computer, and share one with many other people. For many jobs, the value is not in the person, but in the position, so the position has a single computer for a function that multiple people fill. Especially if you work for a company that operates 24/7. For example, each person per…
If you're mixing work resources and personal email (or vice-versa), you have a problem. You should never hand off control of your intimate personal life to the security (or lack thereof) of your employer. And vice versa; your employer should not trust putting their intellectual property on questionably secured personal computing devices.
"Passwords are dying" NOPE. Magic Links are dieing. This is probably the 20th time I've seen a start-up posting proudly about how they chose magic links over standard auth and I don't think any of them have stuck. It is a TERRIBLE user experience. * We have a tab open on your site, it tells us to go to our e-mail to get a link, and then that opens up a different tab. * Or we only check that address on phone which mea…
We have implemented magic link in our new product, also as a way to trying out the tech and understanding user feedback. Appreciate your comments and a lot of great feedback from the discussion on this post in general.
One big flaw with login links sent to email is the delivery problem. You can't assume the email will be delivered so quickly. Who wants to get locked out of their account because the email has not arrived? Login links can be a convenience feature but they must not be the only mechanism for login.
One big flaw with login links sent to email is the delivery problem. You can't assume the email will be delivered so quickly. Who wants to get locked out of their account because the email has not arrived? Login links can be a convenience feature but they must not be the only mechanism for login.
How about a code delivered through SMS? Especially for mobile apps?
"Passwords are dying" NOPE. Magic Links are dieing. This is probably the 20th time I've seen a start-up posting proudly about how they chose magic links over standard auth and I don't think any of them have stuck. It is a TERRIBLE user experience. * We have a tab open on your site, it tells us to go to our e-mail to get a link, and then that opens up a different tab. * Or we only check that address on phone which mea…