The amount of security threat encouragement in these comments is impressive.
Programmer Humor
Welcome to Programmer Humor!
This is a place where you can post jokes, memes, humor, etc. related to programming!
For sharing awful code theres also Programming Horror.
Rules
- Keep content in english
- No advertisements
- Posts must be related to programming or programmer topics
Registration and login should be password less anyway. There's alredy tech for doing it with cellphone or external hardware key.
Storing your password hash is just stupid and insecure
Passwords are quite insecure and people write them down on shit and forget them, I vastly prefer it too, but they're going to die out, probably rather soon, so be prepared.
There are a few reasons for this.
- Conversion rates are higher and the majority tend to prefer these over passwords
- When you have to reset a password, you typically have to send an email anyway.
- It's technically safer because they are short lived tokens and if someone's password gets compromised, their token cannot.
It's not a perfect system by any means, but it's better than the shit implementation of passkeys and it's generally better than passwords for most users.
I prefer passwords over links and codes, but I get it.
I weirdly don't mind the email method. I don't like copy pasting my passwords because I feel it's less secure than typing it out.
Now I wouldn't mind if it was an option.
Edit: this place is turning into reddit