Tagged Questions
4
votes
4answers
122 views
Security issues if not forcing a user to sign up
I've built a simple web app Flask.io that enables users to create and share to-do lists.
It doesn't require sign up. This is an important differentiator. I don't want to force the user to register ...
5
votes
3answers
161 views
Logging in with email only
I'm working on a blog and there will be an option to post a comment.
I could implement registration with username, password and email — the standard way. I could implement 3rd-party authorization ...
3
votes
2answers
76 views
Login mechanism for multiuser smart-phones/tablet
What should be the mechanism for login in a shared smartphone or tablet? Should it be username + password as it is in PCs or should be enough using a password / PIN?
I'm interested on both security ...
0
votes
1answer
59 views
Any good examples of a user signing up for a Browser Certificate / Client Certificate?
A client certificate is something that is used with TLS/SSL to increase security of the HTTPS session. There are two parts to this
The user needs to create the certificate, have it approved (which ...
42
votes
17answers
5k views
Computer login with password only, without username
I have an idea to simplify the login screen on things like home computers with a small number of users (say, 2-10) with passwords.
Today, a typical home computer's login screen has three steps:
...
5
votes
2answers
93 views
What are the conventions for how often a user should be asked to log into a mobile application?
Or put another way - is there a process for deciding how long a user's authenticated session should last?
4
votes
2answers
214 views
Forgot Password Alternatives?
Does anyone know of a good alternative to the Forgot Password link on login forms? I'm not looking to eliminate the link, but to provide an alternate method for retrieving lost passwords.
Our current ...
5
votes
1answer
174 views
Usable examples, recommended practices for interfaces optimized for using pass-phrases instead of passwords
Reading through What is the best way to inspire users to choose strong password?, I realized I have never used an interface where the primary login password system would use pass-phrases (and where ...
9
votes
4answers
648 views
Login button - on homepage or separate page?
I ran across an article called Put the login on the front page, where the author wants sites to:
[...]put the user name and password
box somewhere obvious on the home page
like the upper right ...
6
votes
3answers
50 views
Accessing secure content
Which of the permutations for accessing secure content do folks prefer? In this instance I'm referring to a saved quote and have usernames, email addresses and quote reference numbers available.
...
