Quote from: BoXXoB on Today at 03:48:20 PM

Quote from: dewez on Today at 12:01:15 PM

Quote from: Bitinity on Today at 06:07:11 AM

Quote from: dewez on July 19, 2023, 10:59:21 PM

you would really prefer username/password login? I just hate that system. the current system is so elegant. I was thinking of emailing a code- which you type it, to help with people on different devices.

The question is, will you implement a system based on your preferences or based on player's preferences? As we all know the username with password system is the most used one in most all casinos which means most players are familiar with this system already. Having different account system is unique but I think you should also add the most used system too.

it's not about my preference. it's not secure. fact.. with cracking power nowadays- ANY leaked password is a death sentence. I can promise you that 75% of people use one form of a password, or god forbid the same. yes, i would salt and hash them... but this is a system we need to get away from, actually run from.

i just figured that with 2f being so wide spread- people have access to their email on the reg, people with crypto should be used to it. the device thing, i totally get- which is why i'm adding a code email where you can type it in.

but username and passwords? shit guys. i thought we were better than that. i'm the one who will have to deal with hacked accounts and jacked btc.
but i mean...... if that's really what people want... maybe i can come up with something.

I agree. There's a reason Microsoft and others are pushing passwordless login everywhere. People re-use passwords and store them insecurely. Atleast by using E-mail you only have that one account to secure.

However, I would personally add an option for 2FA on top of the login. It can be an optional feature but should exist nonetheless.

That's very true the password-less login is a quite successful method these days and all of the major sites should implement such type of mechanisms to make users safe from database hacks. I have seen that many users tend to use same usernames and passwords on multiple sites and if any of those sites gets hacked and the database gets leaked then all those users will suffer.

The e-mail address is quite a secure way to receive passwords because everyone uses his/her e-mail address during account registration, and they always have access to that e-mail address because they know that the e-mail address is really worthy because all of the accounts on other sites are created using that e-mail address.

The implementation of 2FA should be a really nice step as that's also known for its security. I also think that 2FA should be an optional feature for those users who think that receiving passwords on e-mail isn't safe. However, I don't think that it's necessary because the system is already a very secure one and those users will understand the importance of password-less login system very soon.