confirmation that a user is who they claim to be, either by verifying what they know (password), what they have (a key) or what they are (fingerprints).

learn more… | top users | synonyms

1
vote
1answer
101 views

How to encourage users to download an app to complete strong authentication (two factor)

I'm designing a strong authentication (two factor) solution for a website. Users will be forced to use two factor (legal requirement). We have two supported methods an SMS verification code texted to ...
1
vote
1answer
48 views

A better alternative to asking secret questions and answers when logging in to a banking site

It seems to be a common practice of credit card and banking web sites to ask answers to secret questions each time you log in from a new computer (for obvious reasons) There are many frustrating ...
1
vote
2answers
178 views

Which Remember-Me option is the best?

Basically, there seem to be three different behaviours of "Remember Me" authentication: Definite: After a successful login, a user doesn't have to provide their credentials during a time span with a ...
1
vote
3answers
99 views

E-mail requirement in game signup process?

I have to make a signup form for a mobile web based game. I want to make is simple. I'm going to request an username and password from the player. May I request an e-mail, and send an activation mail ...
1
vote
2answers
246 views

Authentication pop up on a desktop app: what if it is much bigger than main app window?

I am working on a desktop app that requires authentication. It allows federated authentication using different services, Google among them. Most probably, we'll use a pop up with a browser window to ...
0
votes
3answers
209 views

Is email field assistance still necessary?

For registration forms, it seems the trend now is to allow any password a user wants, as long as you inform him if it's weak. With this in mind, should we still validate email fields on the client ...
0
votes
2answers
60 views

Back to login page authentication expiration behaviour

If a user presses back after logging in to a website should the authentication cookie be set to expire because the user expects to be logged out if they can see the login page or not?
0
votes
2answers
50 views

Putting authentication in preferences

If authentication is completely optional, and provides next to no features, is it okay to dump it in a preferences tab?
0
votes
1answer
84 views

Why do you need a login/ register button?

I'm wondering if it makes sense to have "login/register" buttons displayed on the website header. The client would be redirected anyway to the register/login page whenever it tries to access a ...
0
votes
3answers
856 views

Better Registration for Mobile Apps

We want to let users register on our Mobile App with their Phone Number, then verify it using SMS without the need to enter a password -- may be like what WhatsApp is doing with their on-boarding ...
0
votes
3answers
500 views

Sign Up and Sign In widget on every page: Slide-down Panel or Lightbox

I have a question about implementing a sign up and sign in widget that works on any page on a site (i.e. without redirecting users to a sign in page when they want to log in to interact with content ...
0
votes
1answer
155 views

How should I go about integrating Mozilla Persona in a website?

For those who've never heard of it before, Mozilla Persona is a single sign-on method that's pretty strict on privacy. For me, as a website administrator, it means that I don't need to ask the user ...
0
votes
1answer
167 views

When should “Log on” or “Log off” be used? [duplicate]

Possible Duplicate: Using “Sign in” vs using “Log in” I'm porting an old application that has a "Log on" screen. When would I use "Log on" vs the alternatives (Sign ...
0
votes
1answer
157 views

How to manage credentials information to the user?

I've created a plugin for an editor. This plugin gets some information from the project and shows you all the related issues, getting the information from an external application (Github, gitlab, ...
0
votes
0answers
66 views

Are users more likely to sign up with social login? [duplicate]

These days social login (via Facebook, Google, Yahoo, etc.) is becoming more and more popular. But it has problems: some users are reluctant to link their accounts on different sites to each other, ...