is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user

learn more… | top users | synonyms

2
votes
1answer
20 views

Logging in: fields in a header, or dedicated link?

Does anyone know if it's better practice to include user login fields in the header of a website, or just a login link that takes the user to a login page (or a modal lightbox style login)? For ...
2
votes
4answers
696 views

What would be a reasonable & secure time frame for a temporary account lockout?

We are implementing a temporary account lockout after throttling login attempts and actively directing users to reset their password. Users can still go through the reset journey even during temporary ...
1
vote
2answers
54 views

Which social login should I use, Google OAuth2 or Google+?

Google supports 4 ways to "sign in with google" OAuth OAuth2 Google+ Google Apps I want a generic "sign in with google", I'm not doing anything app-specific, so the last one is out. Presumably ...
0
votes
2answers
80 views

Should i make users login to my Mobile App?

I am making a Free Mobile App - where user's can find images by categories, and rate them. I do not need to know which user rated what image. So, Should i make user's login to the app? If, i force ...
0
votes
1answer
42 views

Asking a user what they have and provide them a way to do it vs only providing them a way to do it

I work for a company that provides survey software for large food companies for taste testing. They use our software in their labs to test new products or improve existing products. Sometimes they ...
1
vote
3answers
144 views

Shouldn't the “Remember Me” option be before the inputs?

When I'm logging into a website, I ALWAYS forget to tick the "Remember Me" checkbox. While the system is logging me in, I always want to go back and tick that, but by the time I'm being redirected to ...
5
votes
4answers
214 views

How many atempts should you give a user before invalidating his password?

What I am trying to avoid here is brute force attacks on a user's password. And I am thinking about doing that by invalidating his password when too many attempts are made in the same minute, hour, ...
0
votes
2answers
65 views

Best way to register and login within the same form

I have an app in which users add items to a database that is synced across all devices. I need users to login in order to attach an author to each item and to record how many "points" each user has ...
13
votes
2answers
2k views

Which is the better UX for a user to see their password at the login screen?

These are the two options I'm considering. Having a tickbox for a 'show password' option, which would let the user see their password. A 'caps lock' icon would be in the password text area which ...
2
votes
1answer
62 views

How often do people mistype their password?

Has anyone done any studies or gathered data on how often people typically mistype their password? What is a normal rate of fat-fingering, forgetting password, etc.?
0
votes
1answer
30 views

How to encourage users to download an app to complete strong authentication (two factor)

I'm designing a strong authentication (two factor) solution for a website. Users will be forced to use two factor (legal requirement). We have two supported methods an SMS verification code texted to ...
14
votes
4answers
2k views

Why is “register” the default button rather than “log in”? [duplicate]

I have noticed an increasing trend the last year towards emphasizing the "register" button rather than "log in". Often log in is not even a button, just a link. I understand the desire to simplify ...
0
votes
0answers
24 views

Any suggestions for letting user Activation by clicking link OR typing in confirmation code?

Sometimes, our users do not have access to their email on the same device they are using our web app on, for example, they can check their email on their iphone, but the iphone is too small to use ...
2
votes
1answer
110 views

Two Factor Authentication (2FA) - Does this impair experience?

One of our products that we have built in our workplace is a dashboard where users can view their "big data", visually and broken down into digestible chunks. Recently, it has been suggested in a ...
17
votes
10answers
3k views

How to ensure users can't sign up for multiple accounts?

I'm working on a web app right now which users will normally have to pay to use, but I want to also offer a short demo period (haven't settled on how long yet, but somewhere between 1 day and 1 week). ...
0
votes
7answers
93 views

Does a lock icon show the user is logged in or needs to log in

I am working on a device where the admin can require the user to log into the device into order to use it. The developers originally used a closed lock to show that a user is is "locked out". For ...
4
votes
3answers
346 views

Formatting a Login Screen

I am designing a login page for my school's network. I'd like to display the logo of our school next to the login form. I've created two prototypes: In the first design, the image+form is ...
0
votes
1answer
57 views

Inform user of invalid email on password reset

Should the user be told if they enter an email which is not in the database? User forgets their password and clicks a link to reset it. Page displays "An email was just sent out to youremail@bla.com ...
4
votes
2answers
147 views

Why Google and Facebook use one text field by page for account creation?

I would like to know if there is some reason to have the account creation tunnel that way. Is it only because user focus more on an action by page?
2
votes
3answers
95 views

Log In / Sign Up on Splash screen?

Is it common to include Login / Sign Up actions on an app's splash screen? Or is it more efficient to first have a Splash screen, and then follow with a dedicated Log In / Sign Up page?
1
vote
2answers
97 views

Should I use multiple '*' when typing in one character?

I am designing a secure password login page. I am thinking about outputting multiple * for one typed character. For example: User types: a Password field shows: ****** My rationale for this is ...
35
votes
10answers
6k views

Is it OK to autocorrect users when they have mistyped parts of their email address?

When logging in, users might mistype parts of their email address. For example, name@company.con instead of .com, Yaho instead of yahoo, etc. The main rationale is that by autocorrecting user input ...
4
votes
1answer
153 views

What is the difference between login throttling and temporary account lockout? what impact on the end user?

I am currently working on the redesign of a login page. I have initially suggested that login be throttled whereby pauses (incremental - in number of seconds) are introduced between each failed login ...
2
votes
3answers
292 views

Approaches on having a sign in, sign up, and guest form in mobile app with as little annoyance as possible

At a university class we are to create an application for mobile devices for an actual client (a municipality). The app allows inhabitants of said municipality to file complaints concerning roadway ...
0
votes
2answers
185 views

“Remember me” login functionality

Is there any research available about the viability and use of "Remember Me" toggles/check boxes on login flows? I can't seem to find any information on whether or not they're used or not.
1
vote
1answer
49 views

Automatic login on password reset

This question has been raised on http://security.stackexchange.com/questions/40723/why-do-you-need-to-login-after-you-change-a-password - With security in mind As one user states: "From a security ...
0
votes
1answer
26 views

Redirect user after login depending on the context

In the website we're building after users log in we redirect them to their "Organization" page. We have a new feature that allows two users to connect. Many users seem to ignore incoming connection ...
1
vote
4answers
269 views

Can users login and register via the same form?

In designing my project I've toyed with having the login and registration in the same form. The inputs for the details needed to login would be there initially, and if the user presses the register ...
2
votes
2answers
48 views

What to call a page that covers the Sign In / Sign Up aspect of user accounts?

I would like to make a page that covers creating a user account / signing into a user account. I have researched this before and found out that sign in / out / up is generally a better term to use ...
2
votes
1answer
114 views

Strange login flow in Microsoft Products

When I open OneDrive, OneNote or other Microsoft software, I press the Log In button and it displays a form with a field to enter ONLY email. When I press Next, I land on a standard login form with ...
4
votes
2answers
92 views

Is it really much helpful for users to provide them multiple options to sign-up or sign-in?

I had created account on a website some months ago and today to wanted to login again but I now I don't remember which method I had used first time to create account. If I would try the option ...
0
votes
1answer
52 views

What to do when user is logged and goes to login page?

My website has three pages: / /login /dashboard When an user goes to /, if the user is logged, it redirects to /dashboard, but when is not logged, it redirects to /login. But I want to know what ...
0
votes
2answers
57 views

Choosing the right 3rd Party Login Services for your app

I'm building a desktop/mobile app and in addition to the standard login I wanted to provide a way for users to be able to login to from services such as Google, Facebook, etc. The difficult part in ...
0
votes
1answer
110 views

Password recovery and user expectations

I am in a dilema, currently designing a login screen, to recover their passwords users will be relying exclusively on (SMS). Is it worth setting users expectation to the type of recovery mechanism ...
5
votes
3answers
151 views

The login, sign in/up and checkout process

So I've taken on the task of rebuilding the checkout process since the way it's done now is really horrifying for the end user.. I've drafted a chart of how the process is today where each box is a ...
3
votes
2answers
115 views

Facebook/Twitter login only vs. Facebook/Twitter signup and login separately

I have searched for this topic here, but haven't found solid answers for the problem. So the situation is this: we are creating the authentication screens for a mobile app and we are not sure which ...
1
vote
2answers
138 views

Acceptable maximum number of steps for sign in or sign up before using the service

Note: This is for a service mainly powered, or should I say funded, by video ads. Not really UX-friendly, I suppose, but what can we do Here's the flow right now: Sign in Home -> Login form ...
0
votes
1answer
110 views

Security questions vs secret password/passcode when logging in or retrieving login details?

I am currently in the process of re-designing a login process which uses security questions to verify the identity of users before they are successfully logged in, and also to allow them to reset ...
21
votes
3answers
2k views

Login and Register in one form

We have been seeing more sites following this UX enhancement: where login form actively checks for registered username/email, if a user entered an unknown email/name, then the form inputs are updated ...
1
vote
1answer
63 views

Registration form inline password generation?

A client has given me "design direction" for their site's account creation form (it's a utility site) that includes an option to have the system generate a password for the user inline on the form, ...
3
votes
4answers
223 views

Interested in why the “Sign In” options are sometimes so trivially designed compared to the “Sign Up” option?

Over the past few months I've noticed a lot of big name websites that seem to trivialize the "Sign In" design in comparison to the "Sign Up" design, which is much more centrally located, and usually ...
1
vote
4answers
142 views

Forms with Remember Me or Save for Later

A reoccurring form appears where a user is presented with a short form followed by small checkbox and then a submit button. My personal experience using these things is that I don't notice the ...
0
votes
3answers
168 views

Why are login walls before receiving main value a bad idea?

Specifically, I'm inquiring about music streaming websites. Sites such as Songza, 8tracks, etc. all allow a user to play music right away with no login restrictions. While I understand that the ...
3
votes
4answers
210 views

Asking users to sign in when already logged in

This is a rather confusing user interface element: The presence of my name indicates to me that I am logged in The presence of the "Sign in" link indicates to me that I am logged out eBay isn't ...
2
votes
1answer
108 views

Prompting customer login before making changes to their account

In a project I'm working on, there's a service website where customers can register objects they own in order to use the service. If a customer owns many of these objects, all can be registered on the ...
2
votes
3answers
119 views

Should ergonomics be added to password strength meters?

After getting locked out of my account for typing in my password incorrectly several times in a row, I realized that the password I chose is too prone to typos and has resulted in locked accounts. It ...
0
votes
1answer
95 views

If username is required for registration, but optional for login (email can be used instead), should it be part of the register form?

My registration form requires 3 things: username, email, and password. For login, the user can use either username or email (and password of course). Thus, if the username is not necessary for ...
1
vote
2answers
147 views

Which Remember-Me option is the best?

Basically, there seem to be three different behaviours of "Remember Me" authentication: Definite: After a successful login, a user doesn't have to provide their credentials during a time span with a ...
0
votes
0answers
78 views

Is there any evidence that typing DOMAIN\Usename to login to a company network affects usability?

We seem to be having a number of issues related to users having to enter the company DOMAIN and then their usernames to log in to our internal web based systems. For example the username would need ...
0
votes
1answer
69 views

“Remember me” if subsequent login fails

Should the username of a successful sign-in be remembered ("Remember me" was enabled) if a subsequent sign-in attempt fails (i.e. credentials are invalid)? Note: "Remember me" remembers the username ...