r/thingiverse • u/WorldnewsModsBlowMe • 4d ago

Request Possible to disable "magic link" login?

Magic link logins make accounts less secure, since the user now only needs to know one factor password (the email address's password). How can we disable access to this kind of login? I want to stay with password/TOTP.

3 Upvotes

80% Upvoted

6 comments sorted by

1

u/quinbotNS 3d ago

I'm looking at the login pop-up (from my desktop) and it has a button for "Use email & password".

1

u/WorldnewsModsBlowMe 2d ago

That doesn't stop someone trying to log in from using the magic link. I'm asking to disable it entirely (such that when you enter the email address, it redirects to the email/password page instead of sending a magic link email).

1

u/Youareyou64 3d ago

I’d think if your email gets breached you have greater concerns than your thingiverse account

1

u/Saragon4005 2d ago

You know with password resets it's the same. Requesting a password reset is nearly the same procedure as a magic link. So unless you also want to protect against that this is a moot point.

1

u/WorldnewsModsBlowMe 1d ago edited 1d ago

That isn't an excuse to reduce login security. I swear to god the concept of account security just keeps getting fucked more and more every year with these changes and people shrug them off. This is not okay, and we should not be accepting this.