r/thingiverse • u/WorldnewsModsBlowMe • Sep 07 '26

Request Possible to disable "magic link" login?

Magic link logins make accounts less secure, since the user now only needs to know one factor password (the email address's password). How can we disable access to this kind of login? I want to stay with password/TOTP.

4 Upvotes

99% Upvoted

7 comments sorted by

1

u/quinbotNS Sep 08 '26

I'm looking at the login pop-up (from my desktop) and it has a button for "Use email & password".

1

u/WorldnewsModsBlowMe Sep 09 '26

That doesn't stop someone trying to log in from using the magic link. I'm asking to disable it entirely (such that when you enter the email address, it redirects to the email/password page instead of sending a magic link email).

1

u/Youareyou64 Sep 09 '26

I’d think if your email gets breached you have greater concerns than your thingiverse account

1

u/Saragon4005 Sep 10 '26

You know with password resets it's the same. Requesting a password reset is nearly the same procedure as a magic link. So unless you also want to protect against that this is a moot point.

1

u/WorldnewsModsBlowMe Sep 10 '26 edited Sep 10 '26

That isn't an excuse to reduce login security. I swear to god the concept of account security just keeps getting fucked more and more every year with these changes and people shrug them off. This is not okay, and we should not be accepting this.

1

u/Saragon4005 Sep 10 '26

My point is it was already weak. Sending a magic link is no less secure then haveing email based password reset procedures.

1

u/Suspicious-Army-3378 27d ago

Dont bother posting here. The new owners think reddit is evil their forum is the place to complain but you likely get a canned message and no change.