A secret word or string of characters that is used for authentication, to prove identity or gain access to a resource.
61
votes
11answers
5k views
Why should we ask the password twice during registration?
It would be easier to ask for a user's password only once during registration.
The problem: The user could make a mistake while typing the password once because of hiding letters.
The solution: The ...
58
votes
14answers
5k views
Is a “repeat password” field necessary in a signup page? [duplicate]
Possible Duplicate:
Why should we ask the password twice during registration?
When designing a new and simplified signup page I got into an argument with a colleague about the necessity of ...
42
votes
10answers
2k views
What is the best way to inspire users to choose strong password?
Most of the users use weak passwords. They may use weak passwords even for services where they store sensitive information. I think it's because they don't believe that their password may be ...
9
votes
9answers
343 views
barebone registration: is password repitition and captcha really essential?
If you design a barebone registration form which only requires
email address and password as essentials can you omit the password repetition and captcha without too much technical trouble?
I ...
5
votes
5answers
489 views
Forgotten Passwords - is there a real benefit to asking for memorable password hints on signup?
On several signup forms I see fields such as "Choose your Memorable Password Question". Is this actually benifical nowadays? Surely a more secure method if someone forgets their password is to build a ...
5
votes
3answers
898 views
How to show password reset option
In my website I put password recovery option hidden. I know there are two options to deal with it.
Classical way, Show it as the next sentence to the register link. Example, "Want to try? Sign up ...
15
votes
2answers
680 views
Should we send both username and password after registration?
After users have registered on a website, should that website send both username and password in their registration confirmation email ?
4
votes
7answers
761 views
Is it good user experience to only require an email address at signup?
Is it a good idea to only require an email address from users at signup (without a password or other details)? After they sign up, we will send a random password to their email address; this password ...
16
votes
3answers
363 views
Should password fields have an unmask checkbox?
Is it a good idea to have an unmask checkbox for user selection when the users type their password to show them what they typed?
13
votes
6answers
713 views
Password field in cleartext
I'm building a mobile web app that will request a bunch of information from the user (name, dob, address, etc) and am trying to cut down as much fields as I can.
I've noticed a new trend where mobile ...
10
votes
5answers
727 views
Why do users erase all the password when they hit one wrong key, instead of just the last wrong character?
We login to applications almost every day. The password is stored in our fingers, as an automated process (if they have used it long enough). When users realize they have entered a wrong character ...
8
votes
4answers
629 views
Should we disallow common passwords like “password” and “12345”?
Studies show that people can use some really "insecure" passwords. Here's Mashables worst 25 passwords of 2011 for example. To protect security on our sites (and the overall experience of less-hacked ...
9
votes
3answers
608 views
Should password fields be blanked when inline validation fails?
This question with a similiar name refers to registration, but in my case, I would like to address submission.
My use cases are:
A login form consisting of a email address.
A change password form ...
