@crowdhailer Thank you for your cool product information. So what do you think about its strength against competitors like Firebase Auth or Auth0?

@yatima_k The alternatives you mentioned make it very easy to do Authentication the established way, for example using email + password. We aim to offer just one way to do authentication, that is the way your users will find simplest.

@duarteosrm Thanks Duarte. I think there is certainly potential for supercharging conversion rates, particularly once a DID user who already has already trusted a device visits a new website using DID, they can sign in with just one click. There is such a lot of friction with asking a user to choose a username and password. Our challenge is evidencing that improvement in conversion rate in order to sell that as a feature. Hopefully in time, working with our community of users, we'll be in a position to evidence significant improvement in conversion rate.

@duarteosrm wonderful! Please let me or Peter know if you would like any help.

@almarklein cheers. Another problem that we aim to fix vs those social login solution, is that we don't have a business model that relies on tracking our end users as the sign in to different services

@lewisea thanks for the kind comments. We handle recovery of accounts via email. It is also possible to use you email to add multiple devices to the same account. All of this is handled by DID and when building a website or app you will just have a single identifier for the user to work with

@lewisea Hi Lewis, thanks for your question. If you signed up using your mobile phone, for example, and then wanted to sign in on your laptop DID issues a link to your email which you use to authenticate on the new device. You can choose to authorise multiple devices, a phone, a laptop, a tablet for example. DID then provides you, the end user, with a list of all the devices you have authorised so you can easily manage them. This is slightly easier, we've found, than trying to use a password manager across multiple devices. Does this answer your question?

@richardesigns Totally understand getting something fast and cheap (we're bootstrapping too), but figured it was worth mentioning. Hope i didn't come off as a dick! :)

@richardesigns @pvan1201 Not at all, and we don't think your wrong.

@pvan1201 haha, not in the slightest. Bootstrapping - move quickly, maybe make a goofy vid. My new mantra. What's your product? We probably owe you a +1.

@richardesigns we're a couple weeks away from our PH launch. But i wouldn't post it here anyway - today is about you guys! :)

@anna_0x You can always log in using an email, and not select to trust that device. We do have on our roadmap (https://did.nolt.io/) the feature to be able to sign in using a QR code. so you could click sign in with QR on your friends computer scan that with your trusted phone and have one time access to your accounts on your friends computer.

@miro_cosic sites cannot assume their customers are using password managers so there is always the possibility that an account that has password authentication is using a weak/compromised or easily guessable password. Social login is a problem when multiple options are offered there is a choice paralysis on deciding which one to use and when returning remembering which one you used last time

@sven_kudszus email is used for recovery of lost devices. Because we are moving to a new paradigm the email first flow is best for conversion rates, as it confuses fewest visitors. All the keys are stored on in your browser in the mydid.app domain. If you want to try you can: - visit mydid.app first set up your device, still with email backup. - Then when you try to sign up at did.app to sign up with a single click for as long as you have that device, or until you clear your history

@idontremember Hi Kevin, thanks for your question. If any device is lost (including a laptop but it could be a phone or tablet) then the user has the option to untrust that device from inside their DID account. The user needs a device that isn't lost in addition to the one that is lost but if the user can access the internet, they can access their DID account and untrust a previously trusted device. What we also found during our testing and gathering rounds of feedback is that devices tend to be locked either with a pin code, a device password or something more personal like your face scan or fingerprint scan. If the device is lost, the theif would still need to access the operating system. It's worth adding I feel that, while devices do get lost and stolen, they are much harder to steal than a digital password is to phish or crack for example. We advise users to only trust devices that are secured with biometrics or pin codes to mitigate this risk, however. In addition to this, if a device is stolen that has no 'lock', the thief could still access websites that have long-lived sessions or 'saved passwords' in exactly the same way. Our aim has always been to make sure DID's device authentication at least as secure as a username/password sign in with our focus being on convenience for the user and potential conversion improvement for the website. I hope this answers your question, please let me know if you have any other comments and thank you for your interest in DID.

@alextassone once people realize that almost every password based authentication solution has an email reset and that DID is at least that secure we have received good feedback. We are focused on improving User Experience without any compromise when compared to existing system. We think we have achieved that. There are enhancements that could add even greater security, such as locking you account to only be accessible from trusted devices, i.e. no more email reset. These are things which we can roll out overtime with customers of DID having to make no changes to their integration with DID, these features are on our Roadmap. Could you expand a bit on what you mean by enterprise product? Something that enterprises could use to authenticate there own employees?

@crowdhailer yeah sure. It is for both internal enterprise tools and also for enterprise grade products such as a new mobile app for financial traders at the large banks.

@alextassone We would potentially tackle these audiences however the market is quite crowded for very high security requirement solutions. So we prefer to focus on improving CX and then look to add the enhancements I mentioned in the previous comment.

@tom4 Thanks for the feedback, and bubbles is a nice tool