问HN：为什么许多网站使用登录代码而不是密码？
我注意到有几个网站仅使用一次性登录代码进行身份验证。这是一种通过电子邮件发送的4位或6位登录代码，<i>而不是</i>使用密码，这并不是双重身份验证或密码密钥。（我更希望他们不要这样做，因为这意味着我必须打开电子邮件，而不是使用密码管理器。）其中一些网站还会发送魔法链接。似乎完全采用这种方式（不使用密码）的网站示例包括：substack.com、medium.com、geoguessr.com、bandsintown.com。还有一些网站默认使用这种方式，但也接受密码（例如：spotify.com）。还有一些网站可以接受密码或登录代码，但如果输入密码，它们仍然会要求提供登录代码（例如：homedpot.com）。<p>这种做法是否变得越来越普遍，如果是的话，原因是什么？
查看原文
I've noticed several websites that exclusively a single-use login code for authentication. This is a 4-digit or 6-digit login code sent via email <i>instead</i> of a password, it's not 2FA or a passkey. (I would rather they don't do this as it means I have to open my email instead of using a password manager.) Some of them also send a magic link. Examples of websites that appear to do this exclusively (no password): substack.com, medium.com, geoguessr.com, bandsintown.com. There are also websites that default to this but will also accept passwords (e.g. spotify.com). There are also websites that will accept either a passwords or login code, but if you enter a password then they require a login code anyway (e.g. homedpot.com).<p>Is this becoming more common, and if so why?