A secret word or string of characters that is used for authentication, to prove identity or gain access to a resource.
1
vote
1answer
183 views
Should I provide a “Forgot Password” option for a one-time sign in Android application?
Right now we are developing an android application for a website. In the web site there is this "Forgot Password" option.
But should i have that option in my android application too??
Anyways i am ...
4
votes
3answers
287 views
What solutions do you use to host html prototypes for your clients [closed]
I have been using a basic hosting service to host html prototypes for clients. I have realized that I need a solution that can offer me greater control e.g. to allow me to set master passwords for all ...
9
votes
3answers
614 views
Should password fields be blanked when inline validation fails?
This question with a similiar name refers to registration, but in my case, I would like to address submission.
My use cases are:
A login form consisting of a email address.
A change password form ...
5
votes
4answers
726 views
Why do sites split 'password' and 'username' retrieval into two separate operations?
I find this way of doing it highly annoying when I come back to a site I haven't used in a while. First having to enter my email to get my username and then enter my username and email to reset my ...
8
votes
4answers
631 views
Should we disallow common passwords like “password” and “12345”?
Studies show that people can use some really "insecure" passwords. Here's Mashables worst 25 passwords of 2011 for example. To protect security on our sites (and the overall experience of less-hacked ...
8
votes
4answers
1k views
Pros and Cons for having same form for login, register and forgotten password
I have notice some sites have the same form for login, register and forgotten password.
Below the form you have 3 buttons
i forgot my password
register
log me in
What are the pros and cons on ...
6
votes
4answers
812 views
Any usability studies on password strength meters?
I put together a password strength meter for a signup form, and overall it works very well. It hooks into our DB for the "rules" (number of characters required, mix of letters and numbers, etc.), and ...
5
votes
1answer
174 views
Usable examples, recommended practices for interfaces optimized for using pass-phrases instead of passwords
Reading through What is the best way to inspire users to choose strong password?, I realized I have never used an interface where the primary login password system would use pass-phrases (and where ...
10
votes
9answers
2k views
What is an easier unlock pattern: gesture or code?
There are two popular ways to unlock a phone. iPhone makes you type in a numerical code. Android gives you the option to draw a gesture. Which of these two is easier to remember and easier to execute?
...
6
votes
1answer
138 views
Sign-in Methods for Visitors without Social Networking Profiles
If a visitor needs to sign-on at your site and they don't have any social profiles, their only option is to use a traditional (double opt-in) registration process. That is why websites should always ...
3
votes
4answers
146 views
Best method of rating passwords
I'm creating a webpage which has user accounts and I'd like input on the best way of rating the user's password.
There are four ways to rate passwords which I have encountered:
Rate the password ...
5
votes
2answers
296 views
How should the sign-up page for a mobile website work?
How should the sign-up page for a mobile website be?
For example:-
Does repeat password make more sense or less on mobile version of a website. To put it differently, are users more prone to make a ...
12
votes
5answers
750 views
Is it appropriate to display the warning message “Caps Lock is on”?
Is it appropriate to display the warning message "Caps Lock is on" when focus shifts to Password field?
In gmail and yahoo I don't find. So, what does the standard says?
3
votes
3answers
241 views
Best practice for log-in procedure in a conference-app [closed]
I'm preparing an app for a closed conference with log-in functionality. All the participants are on an email-list.
How do other App's deal with the challenges around obtaining the initial ...
15
votes
4answers
1k views
Should I trim spaces in passwords?
The problem is that we send a user an email with a generated password if they forget.
If they choose to cut and paste it in, then Outlook typically adds a " " to the end of it.
When they paste it ...
4
votes
1answer
817 views
iPhone App: Best practice for sign in with password recovery?
I'm in the process of wireframing an iPhone App for a big website with some functions that can only be used by signed in users (e.g. favorites, saved searched).
Many apps use the modal dialog to ...
3
votes
1answer
230 views
Is autosave appropriate for password fields?
I'm developing an application that has user based access.
Each user can change some settings for their profile (localization, timezone, the password, etc). I've chosen to perform autosave (a la ...
6
votes
3answers
50 views
Accessing secure content
Which of the permutations for accessing secure content do folks prefer? In this instance I'm referring to a saved quote and have usernames, email addresses and quote reference numbers available.
...
8
votes
3answers
300 views
“Remember my password” and “Sign in automatically” on tablets
Is there a need to have "Remember Me" and "Sign in automatically" on mobile devices, especially for tablet based applications? Skype, Fring on iPhone/Android seems to not to have these options, ...
3
votes
3answers
288 views
Lock screens and password recovery on apps
This is partially "UI", but probably falls more into the realm of "UX"; I'm not sure if it'll fit in here or not.
One of the applications that I have runs on the iPad. The information stored within ...
3
votes
3answers
217 views
Should password dialog be in a pop-up or an existing window?
Consider, for instance, an e-mail client that for whatever reason requires obtaining a password. Should the dialog be part of an existing, probably sovereign posture, window? Or should it pop up? ...
