True, but I think most people are signed in to at least one email account on their phone, so in the ideal case it's as easy as two clicks: 1 to open the email notification, and 1 to click the magic link.
I wonder if it could be securely done with the web notifications API, to make it 1 click?
Comments
True, but I think most people are signed in to at least one email account on their phone, so in the ideal case it's as easy as two clicks: 1 to open the email notification, and 1 to click the magic link.
I wonder if it could be securely done with the web notifications API, to make it 1 click?
Click on the service you want to log into, wait 30 seconds-10 minutes for email to arrive, THEN click on email and click on magic link.
And end up clicking on it on the wrong device and now you’re logged in on your phone instead of the desktop.