Hacker News Reader

You can also randomly generate a password for the user on the form they'd normally type one in on registration. Add a "Regen" button to give users more visceral control over it before they submit the form.

View on HN

That's essentially the same as magic links because most users won't remember/save that password and will have to rely on the usually email-based reset flow.

Sure, but this subset of user was going to otherwise reuse their password and be susceptible to cred-stuffing.

The point is to stop the attack and prevent users from accidentally hosing themselves.

Isn't that essentially a manual passkey?

Reply on news.ycombinator.com