Bitwarden releases magic links API

nailingjello, 1 month ago

How do magic links work?

Magic links offer a secure and intuitive authentication method by sending users a unique link via email. Upon clicking the link, users are redirected to the application’s endpoint for token verification and sign-in, eliminating the need for passwords.

Am I missing something? So if someone hacks my email they now have access to all of my accounts? No thanks.

waratchess, 1 month ago

If someone hacks your email you’re already fucked, since for most accounts all that’s required to do a password reset is having email access.

subtext, 1 month ago

This is a API for Bitwarden Passwordless.dev, not for the Bitwarden password manager.

E:

Is this offering a part of Bitwarden Password Manager?

The API is available to customers using Bitwarden Passwordless.dev, a separate product.

Daxtron2, 1 month ago

Plenty of auth implementations that do stuff like this already, and like the other person said, if your email is compromised, you’re already fucked.