Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

1. bind user to email

2. allow login via magic link via email, after login the jwt/cookie/whatever should have no expiration date

3. (optional) allow one user to have multiple emails + merging accounts/users (call it backup email to collecr multiple user emails in advance, soft nudging only, not mandatory to use the product!)

4. (optional) offer any other way to login (un+pwd), google oAuth…

It‘s THAT easy.



Email link and 2FA won't work because old people struggle with switching apps.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: