Tagged Questions
1
vote
3answers
73 views
Forcing users to use a new password everytime they reset
This is getting common that while resetting one's password, web-applications force users not to use a password which they had used before. Just like forcing users to follow a particular pattern of ...
5
votes
2answers
69 views
Masked password characters in a GUI vs terminal
In a GUI form, or for example a login box on a website, it's usual for masked characters to appear like ********* as you type out your password.
But in terminal applications, for example ssh, this ...
22
votes
6answers
892 views
Forcing users to use a particular pattern for passwords
Many websites, specially government ones, enforce users to use a password which conforms to particular criteria. For example: use between 8-13 characters with at-least one integer and one capital ...
13
votes
6answers
623 views
What is the best way to request individual characters from a password?
Frequently, sites that should really value security (especially banks) ask for several individual characters from a password.
Typically I've seen them do it like this:
download bmml source ...
5
votes
3answers
521 views
Should my app send a confirmation email on user registration?
I'm grappling with the user registration experience for my application.
I'm considering this model:
User enters...
Username
Password
Password confirmation
Email address
The app displays a ...
15
votes
5answers
886 views
Should I use two steps or one when users change password?
I currently have a page dedicated to changing passwords. There are 2 options:
A 2 step option:
download bmml source – Wireframes created with Balsamiq Mockups
download bmml ...
2
votes
1answer
90 views
User Authentication/Timeout for web-app with personal Information
The concept behind "Remember my Username" and even allowing browsers to save your "username and password" for this site seems like it could be controversial.
Given that different audiences prefer ...
3
votes
4answers
365 views
Password validation in login form
In registration form, I have client side validation for strength of password. For example password should be not less than 6 symbols, consists at least 1 digit, and at least 1 letter.
For example: ...
2
votes
1answer
165 views
Best way to add account providers?
I briefly looked at spotify and I found that they use 2 providers: Themselves and facebook. Ie I can log in to spotify with facebook. But then it asks me for my spotify account when I downloaded the ...
