#Phishing

We replaced passwords with something worse

The post argues that email-or-phone login codes weaken account security because users cannot tell whether a code prompt is legitimate, and password managers do not help against this phishing pattern.