Bitwarden releases magic links API

https://bitwarden.com/blog/bitwarden-magic-links-api/

26 points · 4 comments · view on lemmy.world

4 Comments

nailingjello@lemmy.zip · 3 pts · 2y (3 replies)

How do magic links work?

Magic links offer a secure and intuitive authentication method by sending users a unique link via email. Upon clicking the link, users are redirected to the application's endpoint for token verification and sign-in, eliminating the need for passwords.

Am I missing something? So if someone hacks my email they now have access to all of my accounts? No thanks.

waratchess@lemm.ee · 10 pts · 2y

If someone hacks your email you're already fucked, since for most accounts all that's required to do a password reset is having email access.

Daxtron2@startrek.website · 3 pts · 2y

Plenty of auth implementations that do stuff like this already, and like the other person said, if your email is compromised, you're already fucked.

subtext@lemmy.world · 3 pts · 2y

This is a API for Bitwarden Passwordless.dev, not for the Bitwarden password manager.

E:

Is this offering a part of Bitwarden Password Manager?

The API is available to customers using Bitwarden Passwordless.dev, a separate product.