News for hackers. Stuff that matters.

A comment on Cierge – passwordless authentication. Parent comment

Re:Cierge – passwordless authentication by DominikD on Friday January 12, 2018 @06:03AM (#16131995)
Password recovery through email is ubiquitous. So password is in no way a second authentication method to your email. That said, email is an identity, not a secret. But for the most part I'd rather protect my identity alone than my identity AND my secret.
[ Parent | on HN ]
Re:Cierge – passwordless authentication by rasengan on Friday January 12, 2018 @06:22AM (#16132086)
When user password are used for security, proper services have additional questions (in other words 2FA) to reset your password by email.
[ Parent | on HN ]
Re:Cierge – passwordless authentication by zwily on Friday January 12, 2018 @12:07PM (#16134357)
No reason you couldn’t use this service + MFA.
[ Parent | on HN ]