• killabeezio@lemmy.world
    link
    fedilink
    arrow-up
    1
    ·
    8 hours ago

    There are a few reasons for this.

    1. Conversion rates are higher and the majority tend to prefer these over passwords
    2. When you have to reset a password, you typically have to send an email anyway.
    3. It’s technically safer because they are short lived tokens and if someone’s password gets compromised, their token cannot.

    It’s not a perfect system by any means, but it’s better than the shit implementation of passkeys and it’s generally better than passwords for most users.

    I prefer passwords over links and codes, but I get it.

    • GreenKnight23@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      8 hours ago
      1. Conversion rates are higher and the majority tend to prefer these over passwords

      can’t attest to this. I’ve seen so many users fail to understand they must click the link in their email to complete registration. some yet, still refuse and complain that “it could be spoofed”.

      1. When you have to reset a password, you typically have to send an email anyway.

      not if you remember your password…

      1. It’s technically safer because they are short lived tokens and if someone’s password gets compromised, their token cannot.

      except for the password on your email. this is just security through obscurity or security theater. just because you sent it as an email doesn’t make it more secure. it just makes it more complex.