Simple passwordless authentication for web projects
I hate email-based authorization. It is an extra step and requires access to a working email. Sure 95% of the time I get that email in a second and then it is only a window switch, copy&#x2F;click, delete and switch back (maybe paste). But 5% of the time it is even worse and the email gets marked spam, or greylisted for 15min.<p>Password authentication is literally just clicking &quot;Login&quot; because my password-manager fills in the field. In this happy path it is also unphishable whereas the email-based example provided here is trivial to phish.<p>The main problem with password login is the &quot;bad&quot; users who haven&#x27;t bothered to set up a password manager or prefer to use their dog&#x27;s name as their password on every site. It really sucks that a great workflow is being punished just because some users are irresponsible.<p>Honestly I&#x27;m excited that we are getting 2FA pretty mainstream but honestly I think passwords are a going to be a good long-term solution. The main differences will be:<p>1. The browser will generate all your passwords. The UX to pick your own password will be awkward.<p>2. You won&#x27;t give your password to the site (or server) but it will be exchanged via a PAKE.