confirmation that a user is who they claim to be, either by verifying what they know (password), what they have (a key) or what they are (fingerprints).

learn more… | top users | synonyms

2
votes
1answer
83 views

A better alternative to asking secret questions and answers when logging in to a banking site

It seems to be a common practice of credit card and banking web sites to ask answers to secret questions each time you log in from a new computer (for obvious reasons) There are many frustrating ...
2
votes
1answer
192 views

Best way to add account providers?

I briefly looked at spotify and I found that they use 2 providers: Themselves and facebook. Ie I can log in to spotify with facebook. But then it asks me for my spotify account when I downloaded the ...
2
votes
1answer
113 views

If a user has created an account on my iOS app using Google, how should I handle their effort to also create an email account?

Imagine a user logged into my iOS app using their Google account. Months later, they are trying to create an account using their email address (the same one connected to their previous Google social ...
1
vote
2answers
222 views

What is the correct tab-indexing for a log-in form with a “forgot password” link?

I have a login form shown below, and I am trying to figure out the correct tabbing for it for the best accessibility and user-experience. This seems like a very common design, but I haven't found a ...
1
vote
3answers
107 views

When entering data, should the user be authenticated on clicking “Create” or “Save”?

Having the two options: Check if user authenticated upon "Save" button click (when the input dialog is shown and filled in with the data) Check if user authenticated upon "Create" button click (...
1
vote
2answers
156 views

UX Design where password is optional

I have a web site where some users authenticate with email/password and other users only require an email address to authenticate. I'm trying to make the most natural login screen, but I'm struggling ...
1
vote
3answers
228 views

Is email field assistance still necessary?

For registration forms, it seems the trend now is to allow any password a user wants, as long as you inform him if it's weak. With this in mind, should we still validate email fields on the client ...
1
vote
2answers
185 views

Which social login should I use, Google OAuth2 or Google+?

Google supports 4 ways to "sign in with google" OAuth OAuth2 Google+ Google Apps I want a generic "sign in with google", I'm not doing anything app-specific, so the last one is out. Presumably ...
1
vote
5answers
271 views

How can I make a login form seem more trustworthy?

We have a web app where the user has to log in at the beginning. The login shows our company logo, the name of the product incl. logo of the product and the login form: I showed this app to a test ...
1
vote
1answer
167 views

How to encourage users to download an app to complete strong authentication (two factor)

I'm designing a strong authentication (two factor) solution for a website. Users will be forced to use two factor (legal requirement). We have two supported methods an SMS verification code texted to ...
1
vote
2answers
249 views

Which Remember-Me option is the best?

Basically, there seem to be three different behaviours of "Remember Me" authentication: Definite: After a successful login, a user doesn't have to provide their credentials during a time span with a ...
1
vote
3answers
115 views

E-mail requirement in game signup process?

I have to make a signup form for a mobile web based game. I want to make is simple. I'm going to request an username and password from the player. May I request an e-mail, and send an activation mail ...
1
vote
2answers
38 views

Linking multiple third-party accounts for a mobile app?

My user wants to access personal content from her Spotify, Soundcloud and other third-party accounts through one native mobile application. Imagine a music player for any personal library. The ...
1
vote
2answers
309 views

Authentication pop up on a desktop app: what if it is much bigger than main app window?

I am working on a desktop app that requires authentication. It allows federated authentication using different services, Google among them. Most probably, we'll use a pop up with a browser window to ...
1
vote
1answer
35 views

is replying to an sms a reliable way of authenticating a response

I have a web app which will relay messages from my desktop applications (which is a workflow application for my client). A typical message would be - 'you have booked your pc in for a service and we ...
1
vote
0answers
29 views

Are wearable device able to do heavy calculation [closed]

It is clear that some smartphone such as iPhone are able to do some biometric data calculations in order to identify users. Wearable devices if we consider it as an extension of smartphone, are they ...
0
votes
2answers
83 views

Back to login page authentication expiration behaviour

If a user presses back after logging in to a website should the authentication cookie be set to expire because the user expects to be logged out if they can see the login page or not?
0
votes
2answers
55 views

Putting authentication in preferences

If authentication is completely optional, and provides next to no features, is it okay to dump it in a preferences tab?
0
votes
1answer
119 views

Why do you need a login/ register button?

I'm wondering if it makes sense to have "login/register" buttons displayed on the website header. The client would be redirected anyway to the register/login page whenever it tries to access a ...
0
votes
3answers
2k views

Better Registration for Mobile Apps

We want to let users register on our Mobile App with their Phone Number, then verify it using SMS without the need to enter a password -- may be like what WhatsApp is doing with their on-boarding ...
0
votes
3answers
534 views

Sign Up and Sign In widget on every page: Slide-down Panel or Lightbox

I have a question about implementing a sign up and sign in widget that works on any page on a site (i.e. without redirecting users to a sign in page when they want to log in to interact with content ...
0
votes
1answer
160 views

How should I go about integrating Mozilla Persona in a website?

For those who've never heard of it before, Mozilla Persona is a single sign-on method that's pretty strict on privacy. For me, as a website administrator, it means that I don't need to ask the user ...
0
votes
1answer
177 views

When should “Log on” or “Log off” be used? [duplicate]

Possible Duplicate: Using “Sign in” vs using “Log in” I'm porting an old application that has a "Log on" screen. When would I use "Log on" vs the alternatives (Sign In ...
0
votes
0answers
69 views

Are users more likely to sign up with social login? [duplicate]

These days social login (via Facebook, Google, Yahoo, etc.) is becoming more and more popular. But it has problems: some users are reluctant to link their accounts on different sites to each other, ...