Comment by lxgr

Comment by lxgr a year ago

1 reply

> Magic links and password resets are all going to give the new owner access.

Which is why you should never exclusively rely on either for sensitive services.

YetAnotherNick a year ago

It's better than SMS based password recovery or "call support to reset your password". What do you suggest is the best approach.