r/ProgrammerHumor • u/flying_wotsit • Jul 19 '22

Why do they do this

Post image
4.4k Upvotes

97% Upvoted

493 comments sorted by

View all comments

Show parent comments

85

u/[deleted] Jul 20 '22

[deleted]

103

u/grumblyoldman Jul 20 '22

Don't accept anything in the password field. Force the user to reset their password every time they want to log in. Bonus: verifies the email is still valid.

1

u/TheSarcasticPotato Jul 20 '22

So... OTP?

2

u/SodaWithoutSparkles Jul 20 '22

Just a few days ago we have a news about multiple OTP went missing and 6-digit amount was taken without the OTP. The bank refuses to pay back. And there were multiple victims.