Profile

My two cents: the real question here is how you handle Authorization, not how you handle Authentication. Creating multiple accounts pushes users to reuse of passwords. There's little to no value in the separate account if an attacker can just pick up what they know from one account and apply it to ...