What’s to stop somebody guessing your account number and gaining access? (Honest question)
Comment on We have successfully completed our migration to RAM-only VPN infrastructure - Mullvad VPN
nul9o9@lemmy.world 1 year agoI assume they mean there are no account credentials. When you “create” an account on their website, you’ll be given a random account number, and no password.
obinice@lemmy.world 1 year ago
nul9o9@lemmy.world 1 year ago
There are lots of possible account numbers, much more than there are accounts. So there is a very small chance that you will guess an active paid account.
And if you do, there’s not much you can get out of it. There’s no personal information tied to the account.
killeronthecorner@lemmy.world 1 year ago
Yeah this is what I meant. It feels so wrong but also makes complete sense.
I think I’ve gotten used to the “safety” of setting my own password and always typing it with my email or username.
But practically speaking they’re very similar and Mullvad’s is arguably safer
GenderNeutralBro@lemmy.sdf.org 1 year ago
I think of it more as “no username, only password”. Realistically, usernames are not expected to be secure or private, so this is effectively the same.