Using only password to authenticate user (no "username" field)
- by Guy
I am creating a client access system, to allow manage invoices, make payments, access information about their products and information/functionality alike.
Supposedly there are less than 1000 clients. Would there be any security threat to use only password (UUID v4 strings) to authenticate user?
My thoughts:
There is virtually no probability of collision or success with brute-force attack. http://en.wikipedia.org/wiki/UUID#Random%5FUUID%5Fprobability%5Fof%5Fduplicates
User friendly (one click go)
It is not intended to be remembered