logoalt Hacker News

rr808today at 2:03 AM3 repliesview on HN

I quite like the new trend where you can login just by entering the 2fa on SMS or email. Skip the whole username/password.


Replies

deweytoday at 2:05 AM

I really dislike these "magic links" as a login procedure as you always have to switch between apps instead of just filling login / 2FA with your password manager. SMS is even worse as it's also insecure.

As an additional option, I can see the benefit for people who live in their Gmail app and don't have a password manager.

show 3 replies
pxctoday at 4:17 AM

If you log in only by the code or magic link, it's not 2FA because there's only one factor

Gigachadtoday at 2:40 AM

Passkeys are even better since you don't have to pull out your phone or switch to email to grab a code. It just logs you in.

Also for old people, its impossible to fall for a phishing page using Passkeys. Unlike auth codes where you can type the code in to a fake login page.

show 2 replies