@trantion @Tarah correct me if I'm wrong, but if they require a code they email you, password is redundant as you could otherwise reset it using the same email. Truth is, you email inbox is the single point of failure, but abstracting from it, I see nothing wrong with ditching passwords in such case
I
iungomadre@infosec.exchange
@iungomadre@infosec.exchange