Big tech going passwordless. Any indie hackers doing the same?

This is cool - thanks for sharing.

I implemented sign-in via email link (using Google Identity Platform), which isn't quite as frictionless as FIDO, but is passwordless as well. AWS Cognito supports this too, and presumably other providers.

I am. I launched https://superblog.ai without a signup form cause I prefer a passwordless approach. Received some flake from few people, but till date there is only "Login with Google" and "Login via Magic Link".

Yep: We use emails with signin links using Mailersend. We also support OAuth for connecting to people's cloud accounts, but mails seemed like a nice simple solution for our account sign-in.

Nobody has complained about it yet, so I'm going to assume it works for people. ;)

Hey! @inmypjs thanks for the mention. Hopefully it's implemented before Github's 2FA requirement.

I think it's a matter of time before this change flows down to smaller companies. Seen this several times: Big companies X, Y Z do something => smaller companies take notice and do the same.

This would even be faster for passwordless logins IMO because many people log-in to Apple/Google/Microsoft consistently and this will create an "expected way of doing things".

Seems like a no-brainer to me

We're also slowly transitioning to a passwordless solution, although it has some drawbacks for non-technical people because they can be uncomfortable about it, but there is so much room to improve overall security.

Most people probably reuse the same password on multiple websites which might not be the smartest choice 😅. So signing up with an email link would prevent that behaviour and you would automatically have verified the users email as well, which is a nice side-effect.

I implemented a login via email link on TabWhale, but some users didn't like it. Having to open your email and click a link is not as straightforward as a social or user + password login. Also, it's unconventional, since the majority of sites use other methods.

But I like it, it's one less password to memorize.

I have implemented passwordless sign in for my app usewildfire.com using Magic.link and so far, its going good. I don't have many users to ask whether they like it or not. I implemented it because i loved signing in via email id instead of remembering password for each site.

How long till it's available for the small fish? 5 years?

It’s a low priority. I have 2FA. I also use identity provider services like aadb2c that manages the login process consistently

Yep! But I use a simple WP plugin to manage it - it provides an email link to login.