A secret word or string of characters that is used for authentication, to prove identity or gain access to a resource.

learn more… | top users | synonyms

15
votes
5answers
1k views

Should I use two steps or one when users change password?

I currently have a page dedicated to changing passwords. There are 2 options: A 2 step option: download bmml source – Wireframes created with Balsamiq Mockups download bmml ...
3
votes
4answers
651 views

Password validation in login form

In registration form, I have client side validation for strength of password. For example password should be not less than 6 symbols, consists at least 1 digit, and at least 1 letter. For example: ...
7
votes
3answers
3k views

Should my app send a confirmation email on user registration?

I'm grappling with the user registration experience for my application. I'm considering this model: User enters... Username Password Password confirmation Email address The app displays a ...
1
vote
2answers
356 views

show password user experience

I have an email and password field on the sign up form. A password rule text and a show password checkbox appear below the password field. The rules for showing the div containing password hint text ...
4
votes
1answer
116 views

Encryption of chat messages and possibility of password loss

I have a client-server chat like app. I would like to add an encryption of messages for users. So, that they will be sure that no one, even service owner, can read their confidential information. I'm ...
66
votes
14answers
10k views

Is a “repeat password” field necessary in a signup page? [duplicate]

Possible Duplicate: Why should we ask the password twice during registration? When designing a new and simplified signup page I got into an argument with a colleague about the necessity of ...
0
votes
0answers
71 views

Is two-field confirmation for emails or passwords user-friendly? [duplicate]

Possible Duplicate: Why should we ask the password twice during registration? It is a very common pattern to require a user to enter things like an email address, or - more importantly - a ...
13
votes
5answers
1k views

Should I let a user copy/paste into a confirm e-mail field for a registration form? [duplicate]

Possible Duplicate: Preventing a user from pasting from the clipboard into a mandatory form field There was a question of stackoverflow, that a programmer did not wont to let the new users ...
2
votes
1answer
131 views

User Authentication/Timeout for web-app with personal Information

The concept behind "Remember my Username" and even allowing browsers to save your "username and password" for this site seems like it could be controversial. Given that different audiences prefer ...
4
votes
2answers
504 views

Forgot Password Alternatives?

Does anyone know of a good alternative to the Forgot Password link on login forms? I'm not looking to eliminate the link, but to provide an alternate method for retrieving lost passwords. Our current ...
6
votes
2answers
443 views

Should we require confirmation before resetting a password?

If a user has forgotten their password for a service, the convention is that they should need only their username and/or registered email address in order to reset their password -- in our case that ...
1
vote
1answer
282 views

Should I provide a “Forgot Password” option for a one-time sign in Android application?

Right now we are developing an android application for a website. In the web site there is this "Forgot Password" option. But should i have that option in my android application too?? Anyways i am ...
4
votes
3answers
464 views

What solutions do you use to host html prototypes for your clients [closed]

I have been using a basic hosting service to host html prototypes for clients. I have realized that I need a solution that can offer me greater control e.g. to allow me to set master passwords for all ...
9
votes
3answers
865 views

Should password fields be blanked when inline validation fails?

This question with a similiar name refers to registration, but in my case, I would like to address submission. My use cases are: A login form consisting of a email address. A change password form ...
10
votes
4answers
905 views

Should we disallow common passwords like “password” and “12345”?

Studies show that people can use some really "insecure" passwords. Here's Mashables worst 25 passwords of 2011 for example. To protect security on our sites (and the overall experience of less-hacked ...
6
votes
4answers
1k views

Any usability studies on password strength meters?

I put together a password strength meter for a signup form, and overall it works very well. It hooks into our DB for the "rules" (number of characters required, mix of letters and numbers, etc.), and ...
5
votes
1answer
347 views

Usable examples, recommended practices for interfaces optimized for using pass-phrases instead of passwords

Reading through What is the best way to inspire users to choose strong password?, I realized I have never used an interface where the primary login password system would use pass-phrases (and where ...
6
votes
1answer
158 views

Sign-in Methods for Visitors without Social Networking Profiles

If a visitor needs to sign-on at your site and they don't have any social profiles, their only option is to use a traditional (double opt-in) registration process. That is why websites should always ...
3
votes
4answers
185 views

Best method of rating passwords

I'm creating a webpage which has user accounts and I'd like input on the best way of rating the user's password. There are four ways to rate passwords which I have encountered: Rate the password ...
3
votes
3answers
295 views

Best practice for log-in procedure in a conference-app [closed]

I'm preparing an app for a closed conference with log-in functionality. All the participants are on an email-list. How do other App's deal with the challenges around obtaining the initial ...
18
votes
4answers
2k views

Should I trim spaces in passwords?

The problem is that we send a user an email with a generated password if they forget. If they choose to cut and paste it in, then Outlook typically adds a " " to the end of it. When they paste it ...
4
votes
1answer
1k views

iPhone App: Best practice for sign in with password recovery?

I'm in the process of wireframing an iPhone App for a big website with some functions that can only be used by signed in users (e.g. favorites, saved searched). Many apps use the modal dialog to ...
3
votes
1answer
253 views

Is autosave appropriate for password fields?

I'm developing an application that has user based access. Each user can change some settings for their profile (localization, timezone, the password, etc). I've chosen to perform autosave (a la ...
7
votes
3answers
75 views

Accessing secure content

Which of the permutations for accessing secure content do folks prefer? In this instance I'm referring to a saved quote and have usernames, email addresses and quote reference numbers available. ...
8
votes
3answers
371 views

“Remember my password” and “Sign in automatically” on tablets

Is there a need to have "Remember Me" and "Sign in automatically" on mobile devices, especially for tablet based applications? Skype, Fring on iPhone/Android seems to not to have these options, ...
3
votes
3answers
338 views

Lock screens and password recovery on apps

This is partially "UI", but probably falls more into the realm of "UX"; I'm not sure if it'll fit in here or not. One of the applications that I have runs on the iPad. The information stored within ...
3
votes
3answers
240 views

Should password dialog be in a pop-up or an existing window?

Consider, for instance, an e-mail client that for whatever reason requires obtaining a password. Should the dialog be part of an existing, probably sovereign posture, window? Or should it pop up? ...