@loicfaugeron@phpc.social there's a good chance your service sends emails anyway so keeping it simple is probably helpful, at least at an early stage. I have seen that single sign on with Google or GitHub is all the rage these days but as others have said, now you're trusting multiple parties to guarantee users can log in