"Emailing a login code after login" called out as the worst pattern in modern web apps

ow · x · 2026-10-21

Developer ow vented about the worst pattern in modern web app design: insisting on emailing a verification code after login, sharing a screenshot of a "Are you who you say you are?" security email with a 6-digit code. The post struck a chord about friction in post-login 2FA flows.

Original post →

More from Fun

Fun channel →