is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user

learn more… | top users | synonyms

0
votes
0answers
5 views

How should I go about making a login system for video game high scores?

I have a couple video games on my website, and to be able to add account-based features I'm implementing a login system for my site. My goal with the login system is to allow users who aren't logged ...
0
votes
4answers
57 views

One time password every time user logs in?

I want to implement a log in system: User simply provides his / her email to sign up / sign in. A random password is generated and sent to his / her email, with a valid period of, say, 30 minutes. ...
47
votes
10answers
6k views

Does it make sense to authenticate a user when he/she provides existing valid credentials while registering?

Someone came up with this proposed behavior recently and I haven't been able to find examples of services working the same way. I have to say I don't really like it, but can't put my finger on a ...
15
votes
6answers
427 views

Is social register enough or should you always add regular register method?

I'm building a web application, primarily aimed at students and young people. I'm guessing everyone has at least one social account(Facebook/Twitter/Google etc.) Is it enough only to offer ...
8
votes
3answers
210 views

Implementing a passphrase instead of a password

I was reading about UX and passwords to try to decide on explaining the requirements (ex: 1 capital letter, 1 number, 1 special character,eight characters) and came across this answer which sent me ...
1
vote
2answers
66 views

Showing predictive text on app login screens

I've noticed that most apps don't show predictive text suggestions on keypads on login screens. Why is that? Is there some security issue around entering password?
0
votes
0answers
55 views

Log in: username + password, or pin-code

For online services handling economic transactions, which login method has the best conversion rates: Username/e-mail and password E-mail/phone-number & a link sent to the user (like Swedish ...
1
vote
2answers
134 views

What is the best practice for login in/ sign up android application

I need to know what is the best practice to design login/signup for in android apps for best user interface. Case 1 Load screen ask to log in or sign up after splash is loaded. Case 2 Choose ...
3
votes
3answers
71 views

Which is perferred - a standalone login page or a javascript popup over a MyAccount page?

I am designing a new website, and am thinking about the UX for accessing a personal account page. Is it "better" to have a standalone login page (and then redirects to My Account details), or a ...
0
votes
1answer
25 views

Login flow with openid / social signin

Due to a technical limitation / privacy settings openid does not always return an email. This leads to the following convoluted signup process: User clicks on login with facebook. User enters email ...
0
votes
2answers
41 views

Is this login arrangement better than a typical social signin?

First I had a social signin which was nearly identical to the old stackexchange login and my login looked almost exactly like SO:s "login with google" "Login with facebook". Now we have designed our ...
0
votes
2answers
49 views

Back to login page authentication expiration behaviour

If a user presses back after logging in to a website should the authentication cookie be set to expire because the user expects to be logged out if they can see the login page or not?
1
vote
2answers
84 views

Log in with username vs. login with email address - which option provides better user experience? [duplicate]

I am developing a new web application and was wondering if I should have people pick their usernames and login with their usernames or should I have them login via their email addresses. Which option ...
1
vote
5answers
199 views

How can I make a login form seem more trustworthy?

We have a web app where the user has to log in at the beginning. The login shows our company logo, the name of the product incl. logo of the product and the login form: I showed this app to a test ...
1
vote
3answers
76 views

Good way to help the user remembering the password strategy [duplicate]

Nowadays sites have different password strategies. In example: Facebook: 6 characters min, no restriction Ameli.fr: 8 characters min, all should be numbers. StackExchange: 8 characters min, upper ...
8
votes
5answers
537 views

Visual reference for user impersonation feature

Right now, when a user logs in, on top of the page it shows it's nick name and an exit icon to sign out. I'm about to implement an "impersonate user" feature and I was wondering how to make it clear ...
2
votes
1answer
48 views

Log-in form on new page or not?

What's considered better for UX? User clicks on the log-in link/button, afterwards she is taken to another page where she can fill the log-in form. Example: Yahoo. User clicks on the log-in dropdown ...
2
votes
2answers
91 views

Should Sign up/ Register open a new page or just a popup window?

I am designing a simple web application. The only main function is displayed in homepage, together with other product feature promotion. On the top of the page, there are two buttons, for sign up and ...
0
votes
0answers
19 views

How can I decide when to use compulsory registration or guest checkout? [duplicate]

I am building a checkout process for a simple website shop (I'm a developer). The site is built to be responsive, so is expected to work on any screen size and be used on mobile, tablet & pc. The ...
0
votes
1answer
62 views

How does signing up / logging in with social media accounts alter user behaviour?

Assuming logging in with Facebook/Google etc. gives the social media company access to and ability to record all the interactions of the user on your website, how does this affect the behaviour of the ...
3
votes
1answer
77 views

Best practice for ordering social media login buttons?

Basically I have a login page, and it has log in with Facebook, Twitter, or Google. What would be the best way to order them? I've often seen it be Facebook, Twitter, then Google, though I never ...
2
votes
2answers
376 views

Material Design experience incosistent when interfacing input forms

The past 6 months I've been slowly studying Google's Material Design guidelines. I've been involved in a number of hybrid apps during this time and have loved the concepts behind MD, it inherently ...
2
votes
1answer
31 views

Logging in: fields in a header, or dedicated link?

Does anyone know if it's better practice to include user login fields in the header of a website, or just a login link that takes the user to a login page (or a modal lightbox style login)? For ...
2
votes
4answers
734 views

What would be a reasonable & secure time frame for a temporary account lockout?

We are implementing a temporary account lockout after throttling login attempts and actively directing users to reset their password. Users can still go through the reset journey even during temporary ...
1
vote
2answers
71 views

Which social login should I use, Google OAuth2 or Google+?

Google supports 4 ways to "sign in with google" OAuth OAuth2 Google+ Google Apps I want a generic "sign in with google", I'm not doing anything app-specific, so the last one is out. Presumably ...
0
votes
2answers
108 views

Should i make users login to my Mobile App?

I am making a Free Mobile App - where user's can find images by categories, and rate them. I do not need to know which user rated what image. So, Should i make user's login to the app? If, i force ...
0
votes
1answer
48 views

Asking a user what they have and provide them a way to do it vs only providing them a way to do it

I work for a company that provides survey software for large food companies for taste testing. They use our software in their labs to test new products or improve existing products. Sometimes they ...
1
vote
3answers
154 views

Shouldn't the “Remember Me” option be before the inputs?

When I'm logging into a website, I ALWAYS forget to tick the "Remember Me" checkbox. While the system is logging me in, I always want to go back and tick that, but by the time I'm being redirected to ...
6
votes
4answers
234 views

How many atempts should you give a user before invalidating his password?

What I am trying to avoid here is brute force attacks on a user's password. And I am thinking about doing that by invalidating his password when too many attempts are made in the same minute, hour, ...
1
vote
2answers
106 views

Best way to register and login within the same form

I have an app in which users add items to a database that is synced across all devices. I need users to login in order to attach an author to each item and to record how many "points" each user has ...
13
votes
2answers
2k views

Which is the better UX for a user to see their password at the login screen?

These are the two options I'm considering. Having a tickbox for a 'show password' option, which would let the user see their password. A 'caps lock' icon would be in the password text area which ...
2
votes
1answer
72 views

How often do people mistype their password?

Has anyone done any studies or gathered data on how often people typically mistype their password? What is a normal rate of fat-fingering, forgetting password, etc.?
1
vote
1answer
60 views

How to encourage users to download an app to complete strong authentication (two factor)

I'm designing a strong authentication (two factor) solution for a website. Users will be forced to use two factor (legal requirement). We have two supported methods an SMS verification code texted to ...
14
votes
4answers
2k views

Why is “register” the default button rather than “log in”? [duplicate]

I have noticed an increasing trend the last year towards emphasizing the "register" button rather than "log in". Often log in is not even a button, just a link. I understand the desire to simplify ...
0
votes
0answers
30 views

Any suggestions for letting user Activation by clicking link OR typing in confirmation code?

Sometimes, our users do not have access to their email on the same device they are using our web app on, for example, they can check their email on their iphone, but the iphone is too small to use ...
2
votes
1answer
137 views

Two Factor Authentication (2FA) - Does this impair experience?

One of our products that we have built in our workplace is a dashboard where users can view their "big data", visually and broken down into digestible chunks. Recently, it has been suggested in a ...
17
votes
10answers
3k views

How to ensure users can't sign up for multiple accounts?

I'm working on a web app right now which users will normally have to pay to use, but I want to also offer a short demo period (haven't settled on how long yet, but somewhere between 1 day and 1 week). ...
0
votes
7answers
124 views

Does a lock icon show the user is logged in or needs to log in

I am working on a device where the admin can require the user to log into the device into order to use it. The developers originally used a closed lock to show that a user is is "locked out". For ...
4
votes
3answers
368 views

Formatting a Login Screen

I am designing a login page for my school's network. I'd like to display the logo of our school next to the login form. I've created two prototypes: In the first design, the image+form is ...
1
vote
1answer
69 views

Inform user of invalid email on password reset

Should the user be told if they enter an email which is not in the database? User forgets their password and clicks a link to reset it. Page displays "An email was just sent out to youremail@bla.com ...
4
votes
2answers
162 views

Why Google and Facebook use one text field by page for account creation?

I would like to know if there is some reason to have the account creation tunnel that way. Is it only because user focus more on an action by page?
2
votes
3answers
137 views

Log In / Sign Up on Splash screen?

Is it common to include Login / Sign Up actions on an app's splash screen? Or is it more efficient to first have a Splash screen, and then follow with a dedicated Log In / Sign Up page?
1
vote
2answers
100 views

Should I use multiple '*' when typing in one character?

I am designing a secure password login page. I am thinking about outputting multiple * for one typed character. For example: User types: a Password field shows: ****** My rationale for this is ...
35
votes
10answers
6k views

Is it OK to autocorrect users when they have mistyped parts of their email address?

When logging in, users might mistype parts of their email address. For example, name@company.con instead of .com, Yaho instead of yahoo, etc. The main rationale is that by autocorrecting user input ...
4
votes
1answer
182 views

What is the difference between login throttling and temporary account lockout? what impact on the end user?

I am currently working on the redesign of a login page. I have initially suggested that login be throttled whereby pauses (incremental - in number of seconds) are introduced between each failed login ...
2
votes
3answers
330 views

Approaches on having a sign in, sign up, and guest form in mobile app with as little annoyance as possible

At a university class we are to create an application for mobile devices for an actual client (a municipality). The app allows inhabitants of said municipality to file complaints concerning roadway ...
2
votes
2answers
372 views

“Remember me” login functionality

Is there any research available about the viability and use of "Remember Me" toggles/check boxes on login flows? I can't seem to find any information on whether or not they're used or not.
2
votes
1answer
70 views

Automatic login on password reset

This question has been raised on http://security.stackexchange.com/questions/40723/why-do-you-need-to-login-after-you-change-a-password - With security in mind As one user states: "From a security ...
0
votes
1answer
35 views

Redirect user after login depending on the context

In the website we're building after users log in we redirect them to their "Organization" page. We have a new feature that allows two users to connect. Many users seem to ignore incoming connection ...
1
vote
4answers
347 views

Can users login and register via the same form?

In designing my project I've toyed with having the login and registration in the same form. The inputs for the details needed to login would be there initially, and if the user presses the register ...