Ask HN: Why do many websites use a sign-in code instead of a password?

8 points by bariumbitmap 48 days ago 4 comments
Summary not yet generated for this article.

Original Text

I've noticed several websites that exclusively a single-use login code for authentication. This is a 4-digit or 6-digit login code sent via email instead of a password, it's not 2FA or a passkey. (I would rather they don't do this as it means I have to open my email instead of using a password manager.) Some of them also send a magic link. Examples of websites that appear to do this exclusively (no password): substack.com, medium.com, geoguessr.com, bandsintown.com. There are also websites that default to this but will also accept passwords (e.g. spotify.com). There are also websites that will accept either a passwords or login code, but if you enter a password then they require a login code anyway (e.g. homedpot.com).

Is this becoming more common, and if so why?

Comments (4 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open