I'm redesigning an application and I'm researching the use of email vs username login options. Our application works with financial institutions and because of this have been told that usernames are required for additional security measures. I cannot find additional information to support this claim and have been reviewing similar questions to see if there is any information proving or disproving this approach.
Upon looking at several banking site I have realized that this seems to be the norm among financial institutions. Paypal seems to be the exception for it is easier to verify identity for money transfers or organizations when using email.
Why do most financial institutions use usernames instead of emails for login?
Are there standards that dictate this is more secure or is it a trust factor for usability?
I've reviewed the following posts that all point toward using emails or email and usernames for login options but do not address if a username provides an additional layer of security.
- When the username is an email address should the field be called 'username' or 'email'?
- Username or email address fields
- email field or username for logging in an application?
- Accessing secure content
- Usernames vs. Real Names
- Why would you, for a local authentication site, have usernames, instead of using e-mail address to login?
- Money transfer username or e-mail