denismo/passwordless-login

Login into mobile apps and website on the Internet without entering your password or sharing any other private information

passwordless-login's Issues

Write unit tests

Initial Thoughts

This is basically half of two-factor authentication. It reduces the security of the approach "something you have AND something you know" by removing the "something you know".

Considering that most people do not pin-protect their devices or do not own an iPhone 5s with Touch ID, that would mean that to break in to someone's account, all you would need to do (in say an office environment) would be to borrow or steal their phone.

However...

If this also ensures that the mobile device/app was reasonably protected (e.g. like the find my friends app does for saved logins or like 1Password does with timed logouts) then it would be reasonably secure.

Comments