Post #1840941
2026-04-21 09:00 UTC
@Tarah My favourite is a website I recently stayed using that says it's sending a "2FA code" to your email. They don't let you set a password.
Replies (1)
-
@iungomadre@infosec.exchange 2026-04-21 10:33
@trantion @Tarah correct me if I'm wrong, but if they require a code they email you, password is redundant as you could otherwise reset it using the same email. Truth is, you email inbox is the single point of failure, but abstracting from it, I see nothing wrong with ditching passwords in such case