Type your address. A six-digit code is sent to it, you type the code back, and you are in. There is no password — not here, not later, not as a fallback. If this address has never been here before, signing in is what creates the account.
A code is on its way to . It is good for 10 minutes, it works once, and it dies after 5 wrong tries.
| no password | Nothing to choose, nothing to forget, nothing to reuse from another site, and nothing on this server that is worth stealing. Proving you can read the mailbox is the whole of it. |
|---|---|
| the code | Six digits, ten minutes, one use, five tries. Asking for another one destroys the first, so there is never more than one live code for an address. |
| the session | A cookie your browser will not let any script read, and which this server stores only as a fingerprint. Never in the address bar. |