is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user

learn more… | top users | synonyms

0
votes
2answers
84 views

Should I use multiple '*' when typing in one character?

I am designing a secure password login page. I am thinking about outputting multiple * for one typed character. For example: User types: a Password field shows: ****** My rationale for this is ...
33
votes
10answers
5k views

Is it OK to autocorrect users when they have mistyped parts of their email address?

When logging in, users might mistype parts of their email address. For example, name@company.con instead of .com, Yaho instead of yahoo, etc. The main rationale is that by autocorrecting user input ...
4
votes
1answer
119 views

What is the difference between login throttling and temporary account lockout? what impact on the end user?

I am currently working on the redesign of a login page. I have initially suggested that login be throttled whereby pauses (incremental - in number of seconds) are introduced between each failed login ...
2
votes
3answers
259 views

Approaches on having a sign in, sign up, and guest form in mobile app with as little annoyance as possible

At a university class we are to create an application for mobile devices for an actual client (a municipality). The app allows inhabitants of said municipality to file complaints concerning roadway ...
0
votes
1answer
106 views

“Remember me” login functionality

Is there any research available about the viability and use of "Remember Me" toggles/check boxes on login flows? I can't seem to find any information on whether or not they're used or not.
1
vote
1answer
33 views

Automatic login on password reset

This question has been raised on http://security.stackexchange.com/questions/40723/why-do-you-need-to-login-after-you-change-a-password - With security in mind As one user states: "From a security ...
0
votes
1answer
21 views

Redirect user after login depending on the context

In the website we're building after users log in we redirect them to their "Organization" page. We have a new feature that allows two users to connect. Many users seem to ignore incoming connection ...
0
votes
3answers
159 views

Can users login and register via the same form?

In designing my project I've toyed with having the login and registration in the same form. The inputs for the details needed to login would be there initially, and if the user presses the register ...
2
votes
2answers
43 views

What to call a page that covers the Sign In / Sign Up aspect of user accounts?

I would like to make a page that covers creating a user account / signing into a user account. I have researched this before and found out that sign in / out / up is generally a better term to use ...
2
votes
1answer
105 views

Strange login flow in Microsoft Products

When I open OneDrive, OneNote or other Microsoft software, I press the Log In button and it displays a form with a field to enter ONLY email. When I press Next, I land on a standard login form with ...
4
votes
2answers
88 views

Is it really much helpful for users to provide them multiple options to sign-up or sign-in?

I had created account on a website some months ago and today to wanted to login again but I now I don't remember which method I had used first time to create account. If I would try the option ...
0
votes
1answer
40 views

What to do when user is logged and goes to login page?

My website has three pages: / /login /dashboard When an user goes to /, if the user is logged, it redirects to /dashboard, but when is not logged, it redirects to /login. But I want to know what ...
0
votes
2answers
56 views

Choosing the right 3rd Party Login Services for your app

I'm building a desktop/mobile app and in addition to the standard login I wanted to provide a way for users to be able to login to from services such as Google, Facebook, etc. The difficult part in ...
0
votes
1answer
100 views

Password recovery and user expectations

I am in a dilema, currently designing a login screen, to recover their passwords users will be relying exclusively on (SMS). Is it worth setting users expectation to the type of recovery mechanism ...
5
votes
3answers
127 views

The login, sign in/up and checkout process

So I've taken on the task of rebuilding the checkout process since the way it's done now is really horrifying for the end user.. I've drafted a chart of how the process is today where each box is a ...
3
votes
2answers
66 views

Facebook/Twitter login only vs. Facebook/Twitter signup and login separately

I have searched for this topic here, but haven't found solid answers for the problem. So the situation is this: we are creating the authentication screens for a mobile app and we are not sure which ...
1
vote
2answers
129 views

Acceptable maximum number of steps for sign in or sign up before using the service

Note: This is for a service mainly powered, or should I say funded, by video ads. Not really UX-friendly, I suppose, but what can we do Here's the flow right now: Sign in Home -> Login form ...
0
votes
1answer
97 views

Security questions vs secret password/passcode when logging in or retrieving login details?

I am currently in the process of re-designing a login process which uses security questions to verify the identity of users before they are successfully logged in, and also to allow them to reset ...
22
votes
3answers
2k views

Login and Register in one form

We have been seeing more sites following this UX enhancement: where login form actively checks for registered username/email, if a user entered an unknown email/name, then the form inputs are updated ...
1
vote
1answer
59 views

Registration form inline password generation?

A client has given me "design direction" for their site's account creation form (it's a utility site) that includes an option to have the system generate a password for the user inline on the form, ...
3
votes
4answers
212 views

Interested in why the “Sign In” options are sometimes so trivially designed compared to the “Sign Up” option?

Over the past few months I've noticed a lot of big name websites that seem to trivialize the "Sign In" design in comparison to the "Sign Up" design, which is much more centrally located, and usually ...
1
vote
4answers
123 views

Forms with Remember Me or Save for Later

A reoccurring form appears where a user is presented with a short form followed by small checkbox and then a submit button. My personal experience using these things is that I don't notice the ...
0
votes
3answers
150 views

Why are login walls before receiving main value a bad idea?

Specifically, I'm inquiring about music streaming websites. Sites such as Songza, 8tracks, etc. all allow a user to play music right away with no login restrictions. While I understand that the ...
3
votes
4answers
196 views

Asking users to sign in when already logged in

This is a rather confusing user interface element: The presence of my name indicates to me that I am logged in The presence of the "Sign in" link indicates to me that I am logged out eBay isn't ...
2
votes
1answer
91 views

Prompting customer login before making changes to their account

In a project I'm working on, there's a service website where customers can register objects they own in order to use the service. If a customer owns many of these objects, all can be registered on the ...
2
votes
3answers
107 views

Should ergonomics be added to password strength meters?

After getting locked out of my account for typing in my password incorrectly several times in a row, I realized that the password I chose is too prone to typos and has resulted in locked accounts. It ...
0
votes
1answer
79 views

If username is required for registration, but optional for login (email can be used instead), should it be part of the register form?

My registration form requires 3 things: username, email, and password. For login, the user can use either username or email (and password of course). Thus, if the username is not necessary for ...
1
vote
2answers
135 views

Which Remember-Me option is the best?

Basically, there seem to be three different behaviours of "Remember Me" authentication: Definite: After a successful login, a user doesn't have to provide their credentials during a time span with a ...
0
votes
0answers
76 views

Is there any evidence that typing DOMAIN\Usename to login to a company network affects usability?

We seem to be having a number of issues related to users having to enter the company DOMAIN and then their usernames to log in to our internal web based systems. For example the username would need ...
0
votes
1answer
59 views

“Remember me” if subsequent login fails

Should the username of a successful sign-in be remembered ("Remember me" was enabled) if a subsequent sign-in attempt fails (i.e. credentials are invalid)? Note: "Remember me" remembers the username ...
2
votes
3answers
94 views

What method(s) would be needed to implement a single sign on to multiple existing sites?

A co-worker asked me an interesting question. What would be necessary to introduce a single sign-on for multiple existing properties? Seem like a straight forward questions, but then I started ...
24
votes
6answers
3k views

Why do financial institutions use usernames instead of emails for login?

I'm redesigning an application and I'm researching the use of email vs username login options. Our application works with financial institutions and because of this have been told that usernames are ...
0
votes
1answer
54 views

Required registration/login for checkout. Should you use a popup on the previous page, or have the login/register on the checkout page?

I am requiring a login/register for my checkout (because the user is purchasing a premium account for my music site). I have seen 2 main ways to do this: On the page linking to the checkout page ...
0
votes
2answers
117 views

How to make registration/login for premium account purchase as painless as possible?

I am currently working on a fundraiser to gain several thousand premium accounts subscribers for my site. Because these are premium accounts (like Reddit Gold), a user must have an account so the ...
0
votes
1answer
66 views

Providing similar login experience while logging in with a button and with enter

It regards standard login forms - I mean those which include login/email field and password field and "remember my login" checkbox, which is often forgotten to click although user would be actually ...
4
votes
10answers
389 views

Is there any advantage of signup before login with social plugins?

I am building a site and was thinking about if there should be a signup option at all. I found the question about the difference between sign up and log in with Facebook/Google/etc but there was ...
0
votes
2answers
106 views

Log into a subdomain and its parent domain independently

We have a site, example.com, that includes a login system for the end users. We then have a CMS, cms.example.com, in which admin users log in to edit the content of the main site. Both sites are ...
0
votes
2answers
150 views

The best way to use Facebook Connect for sign-up/sign-in

I am designing the account system for a site and I need to decide how best to handle connection to Facebook vs. natively registered accounts. Some options I have considered: Make user sign up with ...
7
votes
3answers
112 views

Why do sites like stackexchange have users sign up for each site?

I am really wondering why the SE community of sites is each under it's own login system --> to me it looks like it passes the session data to each but I am not sure. The reason why I am asking is ...
4
votes
6answers
324 views

Wouldn't it be a good UX practice to give hints to users to help them remember their passwords?

Although most of the places on the internet allow users to login with their existing Google or Facebook account, there are still many places where this is not an option. In such cases, remembering ...
2
votes
1answer
62 views

Dealing with Connected Social Accounts and Potential Orphans

Our application has the following signup paths: Twitter Connect Facebook Connect Email/Password Once you signup with one, you have the option to connect either both social account (in the case of an ...
4
votes
2answers
144 views

How to explain Login with OpenID to end users, good models to follow?

I have an analytic app for data-oriented professionals. For authentication it offers social login (Sign in with Google, LinkedIn, Twitter) or "Email me a signin link" (like Forgot my Password ...
0
votes
0answers
61 views

Should login fields be cleared if user is denied to change the profile while logging in?

I am working on a mail application. Currently, while logging in we are saving the user's credentials as a user profile and when the user logs out and in again with some other user ID we ask him if he ...
1
vote
2answers
84 views

Potential UX issues with password-less logins?

There is a fantastic article entitled Is it time for password-less login? that suggests that we could use the "reset password" link as the default login action to any site. It provides a lot of ...
1
vote
1answer
79 views

Should the real estate on a company's login page be used to market company products?

A login page often contains a large amount of real estate which various companies take advantage of to market their own products. In terms of usability this isn't necessarily a good idea, but some may ...
0
votes
1answer
74 views

Optional password field on login

We want all users to enter their employment ID so we can identify them, but it's not so important that we require them to register or remember a password. Some users will be registered for the ...
0
votes
3answers
398 views

Error message for “Invalid Username”

As per "UX guidelines" what should be the error message for a dimmpley Login for having 2 basic fields "Username" & Password. So if a User Enter a username with "Space or special ...
0
votes
2answers
51 views

Should a login navigation item be displayed in the navbar if it opens a modal while the others open a different page

My fixed top navigation bar has five links of equal sizes: the three on the left go to content-related pages; the two on the right access user account functions. One link, "Register," opens up the ...
4
votes
4answers
138 views

Should password complexity be shown at login page?

I believe most (or at least: many) users have passwords pretty much standard - they tend to use even literally the same password for most of the systems they access. This is insecure, of course, but ...
5
votes
5answers
574 views

How to handle requests to pages for logged in users that shouldn't be looking for them?

Let's say a user successfully logs into my web application. At this point there is no need for the “Sign up” and “Log in” pages to be visible anymore in the navigation, but what if they still try to ...