Agreed, and also makes it readily known that that is what you are doing.
The sneakier more user friendly way to implement it would be to require the second correct attempt only if the user has made an incorrect attempt since the last successful login.
What a shitty user experience for regular users.
Yup it’s like how software companies will get a hate on for pirates and take it out on their loyal paying cutosmers
which is why they made a comic instead of a revolutionary thought leading blog post
Hey now, I’m sure there’s someone on LinkedIn suggesting this exact thing with layers of corporate speak.
Just like captcha
Look, we all need to pay a little for the greater good of security.
/s
Agreed, and also makes it readily known that that is what you are doing.
The sneakier more user friendly way to implement it would be to require the second correct attempt only if the user has made an incorrect attempt since the last successful login.