Password expiration is dead, long live passwords

Re:Password expiration is dead, long live passwords by nitwit005 on Sunday June 02, 2019 @10:29PM (#20079948)

I have wondered if some web pages effectively have this as the main log in method. If you have a hurricane tracking page, everyone is going to forget their passwords in between hurricane seasons.

[ Parent | on HN ]

Re:Password expiration is dead, long live passwords by gpm on Monday June 03, 2019 @01:09AM (#20080546)

Steam has nearly done this for me.

Oh, it has a password. But if I remember my password I have to check my email and copy and paste a code from there. And if I forget my password I have to... check my email and copy and paste a code from there... really not much point to the password.

[ Parent | on HN ]

Re:Password expiration is dead, long live passwords by wilsonrocks on Monday June 03, 2019 @01:06AM (#20080534)

Bulb energy supplier in the UK trialled this - they soon switched due to complaints although I didn't really mind it.

Assume it was due to the inconvenience of not being able to remember password/stay signed in.

[ Parent | on HN ]

Re:Password expiration is dead, long live passwords by aikinai on Monday June 03, 2019 @12:28AM (#20080415)

Yahoo Japan (not really related to the defunct original Yahoo and still very successful in Japan) recently abolished passwords for new accounts.

You can only login with reset emails or SMS codes, which is pretty annoying.

[ Parent | on HN ]

Re:Password expiration is dead, long live passwords by brigandish on Sunday June 02, 2019 @11:00PM (#20080068)

I wondered about this too and asked about it on the security stackexchange forum in case I was overlooking some glaringly obvious reason not to. Turns out that most thought it was reasonable too, though maybe too frustrating for some.

https://security.stackexchange.com/q/12828/8518

[ Parent | on HN ]

Re:Password expiration is dead, long live passwords by reaperducer on Monday June 03, 2019 @12:24AM (#20080400)

I've seen Blendle and a couple of other web sites do this.

You go to the login page, and your choices are federated login, standard login, or a one-time login e-mail.

[ Parent | on HN ]

Re:Password expiration is dead, long live passwords by melicerte on Monday June 03, 2019 @04:04AM (#20081269)

medium.com is famous for email OTP authentication. They even blogged about it (search hacker news for more information)

[ Parent | on HN ]