We know their contact email; we can force the contact and login email to be the same (are they ever not?). They can sign in by triggering a login link (like a forgot password link) to their email. It's equivalently secure, if slightly less usable; on the flipside, no need to recall one more password or share it with another site. Can give function of an account with a lower commitment.
We know their contact email; we can force the contact and login email to be the same (are they ever not?). They can sign in by triggering a login link (like a forgot password link) to their email. It's equivalently secure, if slightly less usable; on the flipside, no need to recall one more password or share it with another site. Can give function of an account with a lower commitment.