News for hackers. Stuff that matters.
Re:New Approaches To Designing Log-In Forms by yesimahuman on Monday August 22, 2011 @12:42PM (#2913046)
Here is another one I've experimented with: No passwords. You get a login key in the first email we send, or you can request a new email to log in.

Your email is the weakest link in a lot of password-based schemes anyways, but this approach is less secure and a bit confusing.

Re:New Approaches To Designing Log-In Forms by pagekalisedown on Monday August 22, 2011 @05:28PM (#2914206)
This is a great idea, but is it hard to implement with non-technical users?
Re:New Approaches To Designing Log-In Forms by yesimahuman on Monday August 22, 2011 @06:18PM (#2914375)
I would just say that people aren't used to it. Also you need to decide how you want to send the email. Once on signup (long-lived token, not recommended), once a day (weird, annoying), or on demand (user gets email instead of entering password).

I think it's interesting but in practice passwords are more secure and people are used to them.