Hacker News new | ask | show | jobs
by Tichy 5621 days ago
I guess you would have to ad a secret to the page you want to login to, that said page could display, and another one it could ask you for.

Hm, might become too inconvenient. The only advantage would be not having to remember the password.

This makes me think the traditional password recovery mechanism should also work that way. You should have to enter your new password first, then get the confirmation link to save it.