Hacker News new | ask | show | jobs
by cortesoft 1924 days ago
Not being able to access your account for 3 days when you need to recover your password is not going to be a viable business decision for most services. I think you are SEVERELY underestimating how often the average user needs to recover their password.
2 comments
caconym_ 1924 days ago
My partner resets her Google password every time she logs in. It's just part of the normal flow for her. She probably does it with everything, but I'm not listed as a recovery on the other things.

Something better would be great. She's probably an extreme example, but I think we techy people tend to have a warped view of how comfortable "normal people" are with effective password management.

link
jsnell 1924 days ago
Google has the following. Would you consider it to be "something better"?

https://support.google.com/accounts/answer/6361026

I.e. use smartphone prompts as the first factor (without causing password resets), while the password is just a backup when the phone is not available.

link
enriquto 1924 days ago
> My partner resets her Google password every time she logs in. It's just part of the normal flow for her.

I also do that everywhere. As a matter of principle, I have decided to not remember any passwords in my life. I call it "login by email".

link
marshmallow_12 1924 days ago
tell me. On some little-used accounts of mine i need a new password for every login. Then there's one particular account which never lets me login. I have to make a new password every time...
link
dceddia 1924 days ago
I had one like this. I’d type the new password, confirm it, get “success!” And then type the exact same thing to log in and it would fail.

Turned out that the text box for entering the new password allowed a different number of characters than the one for logging in.

link
marshmallow_12 1924 days ago
wha? Who does that? I don't think that's my problem, though i go crazy every time my password isn't recognized, i go through the process and this message comes up "you must use a different password". And i can't even just go back to the login menu. It's too late! And i paid money for this account.
link
vmception 1924 days ago
I know a popular bank integral to the functioning and liquidity of an entire state whose "eBanking" features are like this, in 2021.
link