is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user

learn more… | top users | synonyms

1
vote
1answer
67 views

How to direct users to opt for a particular social sign-in?

Suppose I am having login form as : How can I direct users to opt in for Google sign-in preferably against Twitter like by doing: placing google option closer to login form making google option ...
0
votes
2answers
44 views

Should i use modal dialog or separate page for login and signup?

Is it OK to use modal dialog for Login and sign up? Or should i always use a separate url.com/login and url.com/signup?
0
votes
0answers
20 views

For enterprise web-based software, which is best Log In/ Log Out vs. Sign In / Sign Out [duplicate]

The last time this question was asked on this platform was 3-4 years and not specific to enterprise SaaS ago, so it's time for an update as our field moves quickly. Based on latest research/work, ...
0
votes
2answers
56 views

Why do companies send out emails for verification if they let you gain access to the app/ website anyways?

I have always wondered why when signing up for websites or apps, some companies would send out an email for verification, but would give the users complete access to the app/website anyways. What ...
15
votes
5answers
2k views

Username or Email label for login form, assuming they're the same?

We are designing a new login screen for an enterprise app. If the username is the same as the user's email address registered with the system, would it be clearer to the user to call the field on ...
49
votes
17answers
8k views

What are some compelling reasons to disallow spaces in usernames?

I'm a developer. Our UX guy is asking us to allow spaces in usernames. The caveat is that they should be allowed anywhere. So entering the username 'JohnDoe' is the same as 'John Doe' is the same as ...
1
vote
2answers
43 views

Email registered by someone else - First time Login / Register

I am working on a system where the administrators can add information about potential users. So a user can exist without even knowing it. Current Login: At this moment there is an extra input ...
0
votes
1answer
24 views

Show functionality prior to sign up?

I am building a list where logged in users have the ability to add to this list. Accordingly, there is an add new button to do so. For the best, most seamless experience, should this button be ...
4
votes
1answer
127 views

Where to redirect the user after a password recovery email has been sent

I am working on the flow for password recovery and can't determine where to redirect the user once an email has been sent to help them complete the process. They enter their email address on this page ...
0
votes
1answer
112 views

How should I go about making a login system for video game high scores?

I have a couple video games on my website, and to be able to add account-based features I'm implementing a login system for my site. My goal with the login system is to allow users who aren't logged ...
2
votes
7answers
123 views

One time password every time user logs in?

I want to implement a log in system: User simply provides his / her email to sign up / sign in. A random password is generated and sent to his / her email, with a valid period of, say, 30 minutes. ...
50
votes
10answers
6k views

Does it make sense to authenticate a user when he/she provides existing valid credentials while registering?

Someone came up with this proposed behavior recently and I haven't been able to find examples of services working the same way. I have to say I don't really like it, but can't put my finger on a ...
17
votes
6answers
474 views

Is social register enough or should you always add regular register method?

I'm building a web application, primarily aimed at students and young people. I'm guessing everyone has at least one social account(Facebook/Twitter/Google etc.) Is it enough only to offer ...
9
votes
3answers
253 views

Implementing a passphrase instead of a password

I was reading about UX and passwords to try to decide on explaining the requirements (ex: 1 capital letter, 1 number, 1 special character,eight characters) and came across this answer which sent me ...
1
vote
2answers
69 views

Showing predictive text on app login screens

I've noticed that most apps don't show predictive text suggestions on keypads on login screens. Why is that? Is there some security issue around entering password?
0
votes
0answers
66 views

Log in: username + password, or pin-code

For online services handling economic transactions, which login method has the best conversion rates: Username/e-mail and password E-mail/phone-number & a link sent to the user (like Swedish ...
3
votes
2answers
318 views

What is the best practice for login in/ sign up android application

I need to know what is the best practice to design login/signup for in android apps for best user interface. Case 1 Load screen ask to log in or sign up after splash is loaded. Case 2 Choose ...
3
votes
3answers
78 views

Which is perferred - a standalone login page or a javascript popup over a MyAccount page?

I am designing a new website, and am thinking about the UX for accessing a personal account page. Is it "better" to have a standalone login page (and then redirects to My Account details), or a ...
0
votes
1answer
28 views

Login flow with openid / social signin

Due to a technical limitation / privacy settings openid does not always return an email. This leads to the following convoluted signup process: User clicks on login with facebook. User enters email ...
0
votes
2answers
59 views

Is this login arrangement better than a typical social signin?

First I had a social signin which was nearly identical to the old stackexchange login and my login looked almost exactly like SO:s "login with google" "Login with facebook". Now we have designed our ...
0
votes
2answers
54 views

Back to login page authentication expiration behaviour

If a user presses back after logging in to a website should the authentication cookie be set to expire because the user expects to be logged out if they can see the login page or not?
1
vote
2answers
121 views

Log in with username vs. login with email address - which option provides better user experience? [duplicate]

I am developing a new web application and was wondering if I should have people pick their usernames and login with their usernames or should I have them login via their email addresses. Which option ...
1
vote
5answers
211 views

How can I make a login form seem more trustworthy?

We have a web app where the user has to log in at the beginning. The login shows our company logo, the name of the product incl. logo of the product and the login form: I showed this app to a test ...
1
vote
3answers
80 views

Good way to help the user remembering the password strategy [duplicate]

Nowadays sites have different password strategies. In example: Facebook: 6 characters min, no restriction Ameli.fr: 8 characters min, all should be numbers. StackExchange: 8 characters min, upper ...
8
votes
5answers
550 views

Visual reference for user impersonation feature

Right now, when a user logs in, on top of the page it shows it's nick name and an exit icon to sign out. I'm about to implement an "impersonate user" feature and I was wondering how to make it clear ...
2
votes
1answer
58 views

Log-in form on new page or not?

What's considered better for UX? User clicks on the log-in link/button, afterwards she is taken to another page where she can fill the log-in form. Example: Yahoo. User clicks on the log-in dropdown ...
2
votes
2answers
102 views

Should Sign up/ Register open a new page or just a popup window?

I am designing a simple web application. The only main function is displayed in homepage, together with other product feature promotion. On the top of the page, there are two buttons, for sign up and ...
0
votes
0answers
20 views

How can I decide when to use compulsory registration or guest checkout? [duplicate]

I am building a checkout process for a simple website shop (I'm a developer). The site is built to be responsive, so is expected to work on any screen size and be used on mobile, tablet & pc. The ...
0
votes
1answer
72 views

How does signing up / logging in with social media accounts alter user behaviour?

Assuming logging in with Facebook/Google etc. gives the social media company access to and ability to record all the interactions of the user on your website, how does this affect the behaviour of the ...
3
votes
1answer
98 views

Best practice for ordering social media login buttons?

Basically I have a login page, and it has log in with Facebook, Twitter, or Google. What would be the best way to order them? I've often seen it be Facebook, Twitter, then Google, though I never ...
2
votes
2answers
555 views

Material Design experience incosistent when interfacing input forms

The past 6 months I've been slowly studying Google's Material Design guidelines. I've been involved in a number of hybrid apps during this time and have loved the concepts behind MD, it inherently ...
2
votes
1answer
37 views

Logging in: fields in a header, or dedicated link?

Does anyone know if it's better practice to include user login fields in the header of a website, or just a login link that takes the user to a login page (or a modal lightbox style login)? For ...
2
votes
4answers
761 views

What would be a reasonable & secure time frame for a temporary account lockout?

We are implementing a temporary account lockout after throttling login attempts and actively directing users to reset their password. Users can still go through the reset journey even during temporary ...
1
vote
2answers
81 views

Which social login should I use, Google OAuth2 or Google+?

Google supports 4 ways to "sign in with google" OAuth OAuth2 Google+ Google Apps I want a generic "sign in with google", I'm not doing anything app-specific, so the last one is out. Presumably ...
0
votes
2answers
132 views

Should i make users login to my Mobile App?

I am making a Free Mobile App - where user's can find images by categories, and rate them. I do not need to know which user rated what image. So, Should i make user's login to the app? If, i force ...
0
votes
1answer
52 views

Asking a user what they have and provide them a way to do it vs only providing them a way to do it

I work for a company that provides survey software for large food companies for taste testing. They use our software in their labs to test new products or improve existing products. Sometimes they ...
1
vote
3answers
165 views

Shouldn't the “Remember Me” option be before the inputs?

When I'm logging into a website, I ALWAYS forget to tick the "Remember Me" checkbox. While the system is logging me in, I always want to go back and tick that, but by the time I'm being redirected to ...
6
votes
4answers
254 views

How many atempts should you give a user before invalidating his password?

What I am trying to avoid here is brute force attacks on a user's password. And I am thinking about doing that by invalidating his password when too many attempts are made in the same minute, hour, ...
1
vote
2answers
117 views

Best way to register and login within the same form

I have an app in which users add items to a database that is synced across all devices. I need users to login in order to attach an author to each item and to record how many "points" each user has ...
13
votes
2answers
2k views

Which is the better UX for a user to see their password at the login screen?

These are the two options I'm considering. Having a tickbox for a 'show password' option, which would let the user see their password. A 'caps lock' icon would be in the password text area which ...
2
votes
1answer
78 views

How often do people mistype their password?

Has anyone done any studies or gathered data on how often people typically mistype their password? What is a normal rate of fat-fingering, forgetting password, etc.?
1
vote
1answer
73 views

How to encourage users to download an app to complete strong authentication (two factor)

I'm designing a strong authentication (two factor) solution for a website. Users will be forced to use two factor (legal requirement). We have two supported methods an SMS verification code texted to ...
14
votes
4answers
2k views

Why is “register” the default button rather than “log in”? [duplicate]

I have noticed an increasing trend the last year towards emphasizing the "register" button rather than "log in". Often log in is not even a button, just a link. I understand the desire to simplify ...
0
votes
0answers
34 views

Any suggestions for letting user Activation by clicking link OR typing in confirmation code?

Sometimes, our users do not have access to their email on the same device they are using our web app on, for example, they can check their email on their iphone, but the iphone is too small to use ...
2
votes
1answer
154 views

Two Factor Authentication (2FA) - Does this impair experience?

One of our products that we have built in our workplace is a dashboard where users can view their "big data", visually and broken down into digestible chunks. Recently, it has been suggested in a ...
17
votes
10answers
3k views

How to ensure users can't sign up for multiple accounts?

I'm working on a web app right now which users will normally have to pay to use, but I want to also offer a short demo period (haven't settled on how long yet, but somewhere between 1 day and 1 week). ...
0
votes
7answers
154 views

Does a lock icon show the user is logged in or needs to log in

I am working on a device where the admin can require the user to log into the device into order to use it. The developers originally used a closed lock to show that a user is is "locked out". For ...
4
votes
3answers
372 views

Formatting a Login Screen

I am designing a login page for my school's network. I'd like to display the logo of our school next to the login form. I've created two prototypes: In the first design, the image+form is ...
1
vote
1answer
77 views

Inform user of invalid email on password reset

Should the user be told if they enter an email which is not in the database? User forgets their password and clicks a link to reset it. Page displays "An email was just sent out to youremail@bla.com ...
4
votes
2answers
167 views

Why Google and Facebook use one text field by page for account creation?

I would like to know if there is some reason to have the account creation tunnel that way. Is it only because user focus more on an action by page?