Using only password to authenticate user (no "username" field)
Posted
by
Guy
on Pro Webmasters
See other posts from Pro Webmasters
or by Guy
Published on 2012-06-02T09:14:40Z
Indexed on
2012/06/02
10:51 UTC
Read the original article
Hit count: 274
authentication
|user-friendly
I am creating a client access system, to allow manage invoices, make payments, access information about their products and information/functionality alike.
Supposedly there are less than 1000 clients. Would there be any security threat to use only password (UUID v4 strings) to authenticate user?
My thoughts:
- There is virtually no probability of collision or success with brute-force attack. http://en.wikipedia.org/wiki/UUID#Random%5FUUID%5Fprobability%5Fof%5Fduplicates
- User friendly (one click go)
- It is not intended to be remembered
© Pro Webmasters or respective owner