How an application is kept secure to prevent unauthorized access.
14
votes
8answers
2k views
How to tell the user his login credentials are incorrect?
When a user has entered incorrect details into a login form, is it better to tell them:
The username or password you have entered is invalid.
or
The user name you have entered is invalid (for ...
42
votes
10answers
2k views
What is the best way to inspire users to choose strong password?
Most of the users use weak passwords. They may use weak passwords even for services where they store sensitive information. I think it's because they don't believe that their password may be ...
5
votes
5answers
495 views
Forgotten Passwords - is there a real benefit to asking for memorable password hints on signup?
On several signup forms I see fields such as "Choose your Memorable Password Question". Is this actually benifical nowadays? Surely a more secure method if someone forgets their password is to build a ...
11
votes
4answers
475 views
When is it right to use “Not <user>?”
Sometimes a site shows a message reading: "You are logged in as [user1]. Not [user1]? Please log out."
When is it right to use such a thing? Where are we assuming someone is mistakenly logged in as ...
8
votes
3answers
487 views
Why did they use two-stage social media sharing buttons?
I recently visited a seemingly fairly reputable web site and was astonished to see their implementation of a two-stage trigger for their social media buttons:
(The text appears when you hover over ...
