A secret word or string of characters that is used for authentication, to prove identity or gain access to a resource.

learn more… | top users | synonyms

3
votes
4answers
677 views

Password validation in login form

In registration form, I have client side validation for strength of password. For example password should be not less than 6 symbols, consists at least 1 digit, and at least 1 letter. For example: ...
10
votes
4answers
932 views

Should we disallow common passwords like “password” and “12345”?

Studies show that people can use some really "insecure" passwords. Here's Mashables worst 25 passwords of 2011 for example. To protect security on our sites (and the overall experience of less-hacked ...
17
votes
7answers
3k views

Are there numbers and letters to avoid for activation codes via SMS?

We are at a fairly early stage in our application development and have run into a usability issue related to typing an activation code sent via SMS into a browser URL. Here's the basic scenario: ...
94
votes
11answers
14k views

Why should we ask the password twice during registration?

It would be easier to ask for a user's password only once during registration. The problem: The user could make a mistake while typing the password once because of hiding letters. The solution: The ...
0
votes
2answers
1k views

Why does the AppStore prompt the user for password for free apps? [closed]

This is something I've been thinking about for a while. Why does the App Store prompt the user for a password regardless whether the app is free or not? My theory is that of consistency; Since you ...
16
votes
2answers
905 views

Should we send both username and password after registration?

After users have registered on a website, should that website send both username and password in their registration confirmation email ?
5
votes
3answers
2k views

How to show password reset option

In my website I put password recovery option hidden. I know there are two options to deal with it. Classical way, Show it as the next sentence to the register link. Example, "Want to try? Sign up ...
5
votes
1answer
369 views

Usable examples, recommended practices for interfaces optimized for using pass-phrases instead of passwords

Reading through What is the best way to inspire users to choose strong password?, I realized I have never used an interface where the primary login password system would use pass-phrases (and where ...
44
votes
10answers
3k views

What is the best way to inspire users to choose strong password?

Most of the users use weak passwords. They may use weak passwords even for services where they store sensitive information. I think it's because they don't believe that their password may be ...
4
votes
3answers
503 views

What solutions do you use to host html prototypes for your clients [closed]

I have been using a basic hosting service to host html prototypes for clients. I have realized that I need a solution that can offer me greater control e.g. to allow me to set master passwords for all ...
11
votes
10answers
2k views

What is an easier unlock pattern: gesture or code?

There are two popular ways to unlock a phone. iPhone makes you type in a numerical code. Android gives you the option to draw a gesture. Which of these two is easier to remember and easier to execute? ...
6
votes
1answer
162 views

Sign-in Methods for Visitors without Social Networking Profiles

If a visitor needs to sign-on at your site and they don't have any social profiles, their only option is to use a traditional (double opt-in) registration process. That is why websites should always ...
3
votes
4answers
189 views

Best method of rating passwords

I'm creating a webpage which has user accounts and I'd like input on the best way of rating the user's password. There are four ways to rate passwords which I have encountered: Rate the password ...
6
votes
4answers
1k views

Any usability studies on password strength meters?

I put together a password strength meter for a signup form, and overall it works very well. It hooks into our DB for the "rules" (number of characters required, mix of letters and numbers, etc.), and ...
2
votes
1answer
183 views

Best way to add account providers?

I briefly looked at spotify and I found that they use 2 providers: Themselves and facebook. Ie I can log in to spotify with facebook. But then it asks me for my spotify account when I downloaded the ...
6
votes
5answers
815 views

Forgotten Passwords - is there a real benefit to asking for memorable password hints on signup?

On several signup forms I see fields such as "Choose your Memorable Password Question". Is this actually benifical nowadays? Surely a more secure method if someone forgets their password is to build a ...
10
votes
4answers
2k views

Social Login adoption vs Traditional Login

I have implemented janrain's social login on my website. I am wondering how important it is to include a traditional login (email/password) system. I believe there may be a significant percentage of ...
2
votes
3answers
645 views

Is it good to create a separate screen for change password?

I have a web-page to create a new user; Now, I want to use the same page for editing the user's profile. Is it good to use the same page for change password? OR do I have to create a separate page, ...
5
votes
2answers
254 views

Password and in place editing

I decided to support in place editing for a simple user table. I am not sure what i should do about password... When i create a new user i can have a textbox to type... When viewing i can hide then ...
6
votes
3answers
476 views

How should the sign-up page for a mobile website work?

How should the sign-up page for a mobile website be? For example:- Does repeat password make more sense or less on mobile version of a website. To put it differently, are users more prone to make a ...
3
votes
3answers
300 views

Best practice for log-in procedure in a conference-app [closed]

I'm preparing an app for a closed conference with log-in functionality. All the participants are on an email-list. How do other App's deal with the challenges around obtaining the initial ...
13
votes
5answers
1k views

Is it appropriate to display the warning message “Caps Lock is on”?

Is it appropriate to display the warning message "Caps Lock is on" when focus shifts to Password field? In gmail and yahoo I don't see it. So, what does the standard say?
18
votes
4answers
2k views

Should I trim spaces in passwords?

The problem is that we send a user an email with a generated password if they forget. If they choose to cut and paste it in, then Outlook typically adds a " " to the end of it. When they paste it ...
4
votes
1answer
1k views

iPhone App: Best practice for sign in with password recovery?

I'm in the process of wireframing an iPhone App for a big website with some functions that can only be used by signed in users (e.g. favorites, saved searched). Many apps use the modal dialog to ...
3
votes
1answer
253 views

Is autosave appropriate for password fields?

I'm developing an application that has user based access. Each user can change some settings for their profile (localization, timezone, the password, etc). I've chosen to perform autosave (a la ...
14
votes
6answers
1k views

Password field in cleartext

I'm building a mobile web app that will request a bunch of information from the user (name, dob, address, etc) and am trying to cut down as much fields as I can. I've noticed a new trend where mobile ...
14
votes
4answers
461 views

Is it good UX practice to have a website generate a password for the user?

Is it good UX practice to have a site generate secure random passwords for users and send it to their email or is it better to have them enter their own one each time?
5
votes
2answers
460 views

Best practice for overriding a pincode in a native iOS app?

I am working on the next version of an existing iPad app which has a pincode to lock admin functions. The current version has no means to override the pincode. We followed similar patterns and use ...
11
votes
5answers
2k views

Pros and Cons for having same form for login, register and forgotten password

I have notice some sites have the same form for login, register and forgotten password. Below the form you have 3 buttons i forgot my password register log me in What are the pros and cons on ...
8
votes
3answers
375 views

“Remember my password” and “Sign in automatically” on tablets

Is there a need to have "Remember Me" and "Sign in automatically" on mobile devices, especially for tablet based applications? Skype, Fring on iPhone/Android seems to not to have these options, ...
8
votes
3answers
802 views

Usability and security for user access and password handling in a web application?

I'm looking at putting together a website aimed at ordinary users that will handle personal data which I don't want to be compromised. How can I make the site secure but also usable? It seems most ...
13
votes
5answers
1k views

Should I let a user copy/paste into a confirm e-mail field for a registration form? [duplicate]

Possible Duplicate: Preventing a user from pasting from the clipboard into a mandatory form field There was a question of stackoverflow, that a programmer did not wont to let the new users ...
3
votes
3answers
340 views

Lock screens and password recovery on apps

This is partially "UI", but probably falls more into the realm of "UX"; I'm not sure if it'll fit in here or not. One of the applications that I have runs on the iPad. The information stored within ...
3
votes
3answers
244 views

Should password dialog be in a pop-up or an existing window?

Consider, for instance, an e-mail client that for whatever reason requires obtaining a password. Should the dialog be part of an existing, probably sovereign posture, window? Or should it pop up? ...
67
votes
14answers
10k views

Is a “repeat password” field necessary in a signup page? [duplicate]

Possible Duplicate: Why should we ask the password twice during registration? When designing a new and simplified signup page I got into an argument with a colleague about the necessity of ...
9
votes
9answers
482 views

barebone registration: is password repitition and captcha really essential?

If you design a barebone registration form which only requires email address and password as essentials can you omit the password repetition and captcha without too much technical trouble? I ...
7
votes
3answers
76 views

Accessing secure content

Which of the permutations for accessing secure content do folks prefer? In this instance I'm referring to a saved quote and have usernames, email addresses and quote reference numbers available. ...