Re:Magic/tragic email links: don't make them the only option
by duxup on Tuesday January 07, 2025 @06:53PM
(#42629175)
It seems like “prevent account sharing” and magic links are somewhat at odds by design.
Re:Magic/tragic email links: don't make them the only option
by johnmaguire on Tuesday January 07, 2025 @11:13PM
(#42630838)
More than a shared password?
Re:Magic/tragic email links: don't make them the only option
by pests on Wednesday January 08, 2025 @12:42AM
(#42631328)
The idea being the user(s) would then have to share a email inbox to share logins, not just a password. It might not be the most inconvenient - this is partly how Netflix did their "Household" lockdown. You can request a travel code and this gets emailed to the primary email.
I feel the way Netflix did this broke the social contract of profile sharing on purpose - before, if you were a good tenant, you could freeload off another paid account without inconveniencing them at all. Memes and jokes formed of still being on an ex-partner's account or how people would rename themselves "Settings".
Getting an email and being harassed for the code by all those account sharers? Much more open and open for annoyingness.
This works on 99% of magic links I've tried except for cases when they are trying to prevent account sharing. I remember the Bird bike app did this, where they required the magic link to be clicked on the same device login was initiated on. I was using my friends account and he would just forward me the link until one day this stopped working.