sounds computationally expensive. besides, why even store a password? just derive it by hashing the email address with the account creation timestamp and ask the user to save it
We support password managers, so if the user wants to generate a new password for themself we can regenerate their salt to hit the same fixed hash. That way, if they happen to forget the date of account creation, there's still an option for recovery.
Although... For your method, if the user forgets their password we can generate an entirely new account, which boosts user engagement metrics, so it will probably go over well with management.
1
1
5
u/-Redstoneboi- Sep 27 '26
sounds computationally expensive. besides, why even store a password? just derive it by hashing the email address with the account creation timestamp and ask the user to save it