Thread

1. blfr · 1789734885 · focus · HN ↗

   Yes, thank you. Maybe I am getting old but password+yubikey/webauthn was really top UX.

   1. xxs · 1789738101 · focus · HN ↗

      What prevents passkey being used alongside password (+ email 2fa)?

      1. blfr · 1789738984 · focus · HN ↗

         Email 2fa otoh is the worst UX I have experienced. I curse every time Claude sends me a magic link. Absolutely hate them.

         1. esafak · 1789739466 · focus · HN ↗

            You don't like not having to worry that they don't store your creds so they can't lose it?

            1. blfr · 1789740281 · focus · HN ↗

               The creds they store hold no value. These creds only give access to their system anyway. They store the email address either way so the situation is no better but less convenient.

               1. esafak · 1789749021 · focus · HN ↗

                  They hold no value precisely because they don't store them and send you a magic link! If they stored a recycled password or its hash, then it would be valuable.

                  1. blfr · 1789751142 · focus · HN ↗

                     Yes but I use separate passwords and webauthn is per domain as well.
         2. xxs · 1789989406 · focus · HN ↗

            Not sure this is what I meant. Password is still stored, along will all the keypass stuff. If you have the option to login with the keypass... or the password - possibly sending you a link (or code) to the email.

Unofficial Hacker News client; not affiliated with Y Combinator.