Grade

90/100

A-

Grade Breakdown

Username and Password Limitations

Snapchat users log in with their custom username or email address, and password. Snapchat has the following password requirements:

• 8 or more characters

Brownie points for giving feedback about password strength.

4/5

Multi-factor Authentication

Snapchat's login MFA supports authenticator apps and a one-time recovery code, without SMS as a backup.

5/5

"Forgot Login" Flows

Snapchat only has a flow for resetting the password, which can be done either with email or SMS.

If the user selects email, they need to enter their email address and do MFA, and then they will get a link in their email to reset the password.

If they select phone, they enter the phone number and receive a verification code, and then can reset the password directly after that; no MFA required.

In both cases, there is a special message if an account doesn't exist with the entered email or phone number.

4/5

Account Change Notification

Snapchat sends detailed notifications when anything about the account is changed, including to the old email and phone number if those are what changed.

5/5