Tagged Questions
30
votes
10answers
3k views
Is “Never tell your password to anyone” message in chat really necessary?
In almost every chat window I open, there's this fairly obvious statement:
Never tell your [password/credit card/social security/etc] to anyone.
Are there some standards for chat functionality that ...
21
votes
6answers
870 views
Forcing users to use a particular pattern for passwords
Many websites, specially government ones, enforce users to use a password which conforms to particular criteria. For example: use between 8-13 characters with at-least one integer and one capital ...
3
votes
2answers
67 views
studies on passcode/keypad versus password/keyboard?
When designing a tablet-based app that needs it's own extra security, there seems to be a couple of common choices: add a password screen with a keyboard, or use a passcode screen that has a keypad.
...
42
votes
17answers
5k views
Computer login with password only, without username
I have an idea to simplify the login screen on things like home computers with a small number of users (say, 2-10) with passwords.
Today, a typical home computer's login screen has three steps:
...
8
votes
6answers
342 views
How to handle “forgot password” when user has not confirmed email?
If you follow the pattern of allowing users access to your application without having confirmed an email (generally considered good UX), how do handle the case where they forgot their password? Very ...
3
votes
3answers
155 views
Case sensitive vs case insensitive passwords
My website has always used case insensitive passwords for millions of users. The security specialist is pushing us to change to case sensitive passwords. Are there any studies or best practices on ...
15
votes
5answers
881 views
Should I use two steps or one when users change password?
I currently have a page dedicated to changing passwords. There are 2 options:
A 2 step option:
download bmml source – Wireframes created with Balsamiq Mockups
download bmml ...
4
votes
1answer
84 views
Encryption of chat messages and possibility of password loss
I have a client-server chat like app. I would like to add an encryption of messages for users. So, that they will be sure that no one, even service owner, can read their confidential information. I'm ...
4
votes
2answers
212 views
Forgot Password Alternatives?
Does anyone know of a good alternative to the Forgot Password link on login forms? I'm not looking to eliminate the link, but to provide an alternate method for retrieving lost passwords.
Our current ...
6
votes
2answers
245 views
Should we require confirmation before resetting a password?
If a user has forgotten their password for a service, the convention is that they should need only their username and/or registered email address in order to reset their password -- in our case that ...
5
votes
1answer
173 views
Usable examples, recommended practices for interfaces optimized for using pass-phrases instead of passwords
Reading through What is the best way to inspire users to choose strong password?, I realized I have never used an interface where the primary login password system would use pass-phrases (and where ...
42
votes
10answers
2k views
What is the best way to inspire users to choose strong password?
Most of the users use weak passwords. They may use weak passwords even for services where they store sensitive information. I think it's because they don't believe that their password may be ...
5
votes
5answers
489 views
Forgotten Passwords - is there a real benefit to asking for memorable password hints on signup?
On several signup forms I see fields such as "Choose your Memorable Password Question". Is this actually benifical nowadays? Surely a more secure method if someone forgets their password is to build a ...
5
votes
2answers
163 views
Password and in place editing
I decided to support in place editing for a simple user table.
I am not sure what i should do about password...
When i create a new user i can have a textbox to type...
When viewing i can hide then ...
6
votes
3answers
432 views
Usability and security for user access and password handling in a web application?
I'm looking at putting together a website aimed at ordinary users that will handle personal data which I don't want to be compromised. How can I make the site secure but also usable?
It seems most ...
6
votes
3answers
49 views
Accessing secure content
Which of the permutations for accessing secure content do folks prefer? In this instance I'm referring to a saved quote and have usernames, email addresses and quote reference numbers available.
...
