Password expiration is dead, long live passwords

Re:Password expiration is dead, long live passwords by lowkeyokay on Monday June 03, 2019 @02:41AM (#20080918)

But Slack then must rely on the security of your email. If the site is dealing with sensitive information like credit cards, this could be a no go.

[ Parent | on HN ]

Re:Password expiration is dead, long live passwords by rocqua on Monday June 03, 2019 @05:05AM (#20081521)

Any site that has a "enter your email for a reset link" feature relies on your email security.

[ Parent | on HN ]

Re:Password expiration is dead, long live passwords by tty2300 on Monday June 03, 2019 @05:47AM (#20081668)

Almost every website in existence except the most security sensitive like bank websites will allow you to reset your password with email.

[ Parent | on HN ]

Re:Password expiration is dead, long live passwords by nkrisc on Monday June 03, 2019 @09:49AM (#20083024)

What email based log in that doesn't use 2FA doesn't ultimately rely on the security of your email?

[ Parent | on HN ]