Hacker News new | ask | show | jobs
by rozenmd 1889 days ago
100% - for OnlineOrNot (https://onlineornot.com) I only use passwordless auth (enter your email, get a magic link emailed) and Google via OAuth for this reason.

Screw losing sleep over whether you're storing credentials correctly.
1 comments
1cvmask 1889 days ago
What happens when the emails fail (like spam folder)? I remeber a thread here on HN on a number of projects where they dumped email link sending as a login method for various reasons and complications. Have you face any challenges as well? If not what's your secret sauce? A better email provider? Would love to know.
link
rozenmd 1889 days ago
Email Provider is a big one - particularly following best practices like DKIM.

Use a large managed service like Postmark or Mailgun. Use AWS SES/roll your own at your own peril.

Worst case, the user doesn't get the email, and uses OAuth (majority of my target audience - agencies - use GSuite).

link