is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user

learn more… | top users | synonyms

0
votes
1answer
23 views

Login flow with openid / social signin

Due to a technical limitation / privacy settings openid does not always return an email. This leads to the following convoluted signup process: User clicks on login with facebook. User enters email ...
0
votes
2answers
32 views

Is this login arrangement better than a typical social signin?

First I had a social signin which was nearly identical to the old stackexchange login and my login looked almost exactly like SO:s "login with google" "Login with facebook". Now we have designed our ...
0
votes
2answers
41 views

Back to login page authentication expiration behaviour

If a user presses back after logging in to a website should the authentication cookie be set to expire because the user expects to be logged out if they can see the login page or not?
1
vote
2answers
63 views

Log in with username vs. login with email address - which option provides better user experience? [duplicate]

I am developing a new web application and was wondering if I should have people pick their usernames and login with their usernames or should I have them login via their email addresses. Which option ...
1
vote
5answers
185 views

How can I make a login form seem more trustworthy?

We have a web app where the user has to log in at the beginning. The login shows our company logo, the name of the product incl. logo of the product and the login form: I showed this app to a test ...
1
vote
3answers
71 views

Good way to help the user remembering the password strategy [duplicate]

Nowadays sites have different password strategies. In example: Facebook: 6 characters min, no restriction Ameli.fr: 8 characters min, all should be numbers. StackExchange: 8 characters min, upper ...
8
votes
5answers
522 views

Visual reference for user impersonation feature

Right now, when a user logs in, on top of the page it shows it's nick name and an exit icon to sign out. I'm about to implement an "impersonate user" feature and I was wondering how to make it clear ...
2
votes
1answer
39 views

Log-in form on new page or not?

What's considered better for UX? User clicks on the log-in link/button, afterwards she is taken to another page where she can fill the log-in form. Example: Yahoo. User clicks on the log-in dropdown ...
1
vote
2answers
69 views

Should Sign up/ Register open a new page or just a popup window?

I am designing a simple web application. The only main function is displayed in homepage, together with other product feature promotion. On the top of the page, there are two buttons, for sign up and ...
0
votes
0answers
19 views

How can I decide when to use compulsory registration or guest checkout? [duplicate]

I am building a checkout process for a simple website shop (I'm a developer). The site is built to be responsive, so is expected to work on any screen size and be used on mobile, tablet & pc. The ...
0
votes
1answer
52 views

How does signing up / logging in with social media accounts alter user behaviour?

Assuming logging in with Facebook/Google etc. gives the social media company access to and ability to record all the interactions of the user on your website, how does this affect the behaviour of the ...
3
votes
1answer
70 views

Best practice for ordering social media login buttons?

Basically I have a login page, and it has log in with Facebook, Twitter, or Google. What would be the best way to order them? I've often seen it be Facebook, Twitter, then Google, though I never ...
2
votes
2answers
278 views

Material Design experience incosistent when interfacing input forms

The past 6 months I've been slowly studying Google's Material Design guidelines. I've been involved in a number of hybrid apps during this time and have loved the concepts behind MD, it inherently ...
2
votes
1answer
30 views

Logging in: fields in a header, or dedicated link?

Does anyone know if it's better practice to include user login fields in the header of a website, or just a login link that takes the user to a login page (or a modal lightbox style login)? For ...
2
votes
4answers
720 views

What would be a reasonable & secure time frame for a temporary account lockout?

We are implementing a temporary account lockout after throttling login attempts and actively directing users to reset their password. Users can still go through the reset journey even during temporary ...
1
vote
2answers
67 views

Which social login should I use, Google OAuth2 or Google+?

Google supports 4 ways to "sign in with google" OAuth OAuth2 Google+ Google Apps I want a generic "sign in with google", I'm not doing anything app-specific, so the last one is out. Presumably ...
0
votes
2answers
99 views

Should i make users login to my Mobile App?

I am making a Free Mobile App - where user's can find images by categories, and rate them. I do not need to know which user rated what image. So, Should i make user's login to the app? If, i force ...
0
votes
1answer
46 views

Asking a user what they have and provide them a way to do it vs only providing them a way to do it

I work for a company that provides survey software for large food companies for taste testing. They use our software in their labs to test new products or improve existing products. Sometimes they ...
1
vote
3answers
152 views

Shouldn't the “Remember Me” option be before the inputs?

When I'm logging into a website, I ALWAYS forget to tick the "Remember Me" checkbox. While the system is logging me in, I always want to go back and tick that, but by the time I'm being redirected to ...
6
votes
4answers
233 views

How many atempts should you give a user before invalidating his password?

What I am trying to avoid here is brute force attacks on a user's password. And I am thinking about doing that by invalidating his password when too many attempts are made in the same minute, hour, ...
1
vote
2answers
88 views

Best way to register and login within the same form

I have an app in which users add items to a database that is synced across all devices. I need users to login in order to attach an author to each item and to record how many "points" each user has ...
13
votes
2answers
2k views

Which is the better UX for a user to see their password at the login screen?

These are the two options I'm considering. Having a tickbox for a 'show password' option, which would let the user see their password. A 'caps lock' icon would be in the password text area which ...
2
votes
1answer
67 views

How often do people mistype their password?

Has anyone done any studies or gathered data on how often people typically mistype their password? What is a normal rate of fat-fingering, forgetting password, etc.?
0
votes
1answer
47 views

How to encourage users to download an app to complete strong authentication (two factor)

I'm designing a strong authentication (two factor) solution for a website. Users will be forced to use two factor (legal requirement). We have two supported methods an SMS verification code texted to ...
14
votes
4answers
2k views

Why is “register” the default button rather than “log in”? [duplicate]

I have noticed an increasing trend the last year towards emphasizing the "register" button rather than "log in". Often log in is not even a button, just a link. I understand the desire to simplify ...
0
votes
0answers
28 views

Any suggestions for letting user Activation by clicking link OR typing in confirmation code?

Sometimes, our users do not have access to their email on the same device they are using our web app on, for example, they can check their email on their iphone, but the iphone is too small to use ...
2
votes
1answer
126 views

Two Factor Authentication (2FA) - Does this impair experience?

One of our products that we have built in our workplace is a dashboard where users can view their "big data", visually and broken down into digestible chunks. Recently, it has been suggested in a ...
17
votes
10answers
3k views

How to ensure users can't sign up for multiple accounts?

I'm working on a web app right now which users will normally have to pay to use, but I want to also offer a short demo period (haven't settled on how long yet, but somewhere between 1 day and 1 week). ...
0
votes
7answers
116 views

Does a lock icon show the user is logged in or needs to log in

I am working on a device where the admin can require the user to log into the device into order to use it. The developers originally used a closed lock to show that a user is is "locked out". For ...
4
votes
3answers
365 views

Formatting a Login Screen

I am designing a login page for my school's network. I'd like to display the logo of our school next to the login form. I've created two prototypes: In the first design, the image+form is ...
0
votes
1answer
62 views

Inform user of invalid email on password reset

Should the user be told if they enter an email which is not in the database? User forgets their password and clicks a link to reset it. Page displays "An email was just sent out to youremail@bla.com ...
4
votes
2answers
160 views

Why Google and Facebook use one text field by page for account creation?

I would like to know if there is some reason to have the account creation tunnel that way. Is it only because user focus more on an action by page?
2
votes
3answers
122 views

Log In / Sign Up on Splash screen?

Is it common to include Login / Sign Up actions on an app's splash screen? Or is it more efficient to first have a Splash screen, and then follow with a dedicated Log In / Sign Up page?
1
vote
2answers
98 views

Should I use multiple '*' when typing in one character?

I am designing a secure password login page. I am thinking about outputting multiple * for one typed character. For example: User types: a Password field shows: ****** My rationale for this is ...
35
votes
10answers
6k views

Is it OK to autocorrect users when they have mistyped parts of their email address?

When logging in, users might mistype parts of their email address. For example, name@company.con instead of .com, Yaho instead of yahoo, etc. The main rationale is that by autocorrecting user input ...
4
votes
1answer
176 views

What is the difference between login throttling and temporary account lockout? what impact on the end user?

I am currently working on the redesign of a login page. I have initially suggested that login be throttled whereby pauses (incremental - in number of seconds) are introduced between each failed login ...
2
votes
3answers
316 views

Approaches on having a sign in, sign up, and guest form in mobile app with as little annoyance as possible

At a university class we are to create an application for mobile devices for an actual client (a municipality). The app allows inhabitants of said municipality to file complaints concerning roadway ...
2
votes
2answers
306 views

“Remember me” login functionality

Is there any research available about the viability and use of "Remember Me" toggles/check boxes on login flows? I can't seem to find any information on whether or not they're used or not.
2
votes
1answer
59 views

Automatic login on password reset

This question has been raised on http://security.stackexchange.com/questions/40723/why-do-you-need-to-login-after-you-change-a-password - With security in mind As one user states: "From a security ...
0
votes
1answer
31 views

Redirect user after login depending on the context

In the website we're building after users log in we redirect them to their "Organization" page. We have a new feature that allows two users to connect. Many users seem to ignore incoming connection ...
1
vote
4answers
315 views

Can users login and register via the same form?

In designing my project I've toyed with having the login and registration in the same form. The inputs for the details needed to login would be there initially, and if the user presses the register ...
2
votes
2answers
49 views

What to call a page that covers the Sign In / Sign Up aspect of user accounts?

I would like to make a page that covers creating a user account / signing into a user account. I have researched this before and found out that sign in / out / up is generally a better term to use ...
2
votes
1answer
115 views

Strange login flow in Microsoft Products

When I open OneDrive, OneNote or other Microsoft software, I press the Log In button and it displays a form with a field to enter ONLY email. When I press Next, I land on a standard login form with ...
4
votes
2answers
96 views

Is it really much helpful for users to provide them multiple options to sign-up or sign-in?

I had created account on a website some months ago and today to wanted to login again but I now I don't remember which method I had used first time to create account. If I would try the option ...
0
votes
1answer
60 views

What to do when user is logged and goes to login page?

My website has three pages: / /login /dashboard When an user goes to /, if the user is logged, it redirects to /dashboard, but when is not logged, it redirects to /login. But I want to know what ...
0
votes
2answers
61 views

Choosing the right 3rd Party Login Services for your app

I'm building a desktop/mobile app and in addition to the standard login I wanted to provide a way for users to be able to login to from services such as Google, Facebook, etc. The difficult part in ...
0
votes
1answer
114 views

Password recovery and user expectations

I am in a dilema, currently designing a login screen, to recover their passwords users will be relying exclusively on (SMS). Is it worth setting users expectation to the type of recovery mechanism ...
5
votes
3answers
160 views

The login, sign in/up and checkout process

So I've taken on the task of rebuilding the checkout process since the way it's done now is really horrifying for the end user.. I've drafted a chart of how the process is today where each box is a ...
3
votes
2answers
145 views

Facebook/Twitter login only vs. Facebook/Twitter signup and login separately

I have searched for this topic here, but haven't found solid answers for the problem. So the situation is this: we are creating the authentication screens for a mobile app and we are not sure which ...
1
vote
2answers
144 views

Acceptable maximum number of steps for sign in or sign up before using the service

Note: This is for a service mainly powered, or should I say funded, by video ads. Not really UX-friendly, I suppose, but what can we do Here's the flow right now: Sign in Home -> Login form ...