Tagged Questions
1
vote
0answers
16 views
Unlock Account for Highly Secure Website
I am working on project for a very secure sensitive website in which the objective is to make the "unlock account" workflow easy and intuitive. Currently, if user enters wrong username and password ...
4
votes
4answers
122 views
Security issues if not forcing a user to sign up
I've built a simple web app Flask.io that enables users to create and share to-do lists.
It doesn't require sign up. This is an important differentiator. I don't want to force the user to register ...
5
votes
3answers
205 views
Should an admin decide what users can do, or should he decide what not to do?
Which one is better option for an admin from a usability point of view?
Suppose if a system is supposed to authorize a user to have access (and different type of access like read only or read write) ...
5
votes
3answers
160 views
Logging in with email only
I'm working on a blog and there will be an option to post a comment.
I could implement registration with username, password and email — the standard way. I could implement 3rd-party authorization ...
2
votes
1answer
60 views
Can providing articles on security improve the perception users have of the security of a website?
I also know many who turns off scripting (JavaScript) from running on their system and won't open any website without HTTPS or any security protocol. Whenever I read about Facebook updating its ...
8
votes
2answers
175 views
how can you improve the appearance of security
What are the different ways to make users (especially paranoid one's like me) feel safe about the security aspect of the site?
1
vote
2answers
118 views
How does the perception of website data being insecure affect usability?
If the user perceives that data entered into a website is insecure (if it is perceived that it can be hacked, stolen or tampered with), how is the usability of the site affected?
This question is in ...
4
votes
3answers
196 views
Norton Safe Web Verification — Impact on User
I have a client who insists on getting their website validated by Norton Security Verification and displaying the seal. However, I am skeptic and do not trust Norton products. I recall an impression ...
4
votes
3answers
200 views
Should we ask for name on card even though it's not required for credit card payments?
The name on card is not used when processing credit card payments. Paypal does not ask the user to enter the name on card when saving a card to the "wallet", while Amazon.com does.
The benefit of ...
42
votes
10answers
2k views
What is the best way to inspire users to choose strong password?
Most of the users use weak passwords. They may use weak passwords even for services where they store sensitive information. I think it's because they don't believe that their password may be ...
7
votes
1answer
177 views
During sign ups, how to best instill confidence that email addresses will be safe
Many sign up forms will ask you for an email address so that they can contact you.
Even the most minimal sign-up (other than no sign up) will need an email address to send you a validation email.
...
8
votes
4answers
380 views
Does SSL on a company's website make the company appear more credible?
I recently had a thought about the way many modern browsers display information about a site's security certificates. At least Firefox shows a very noticeable blue box in the address bar on sites that ...
6
votes
3answers
433 views
Usability and security for user access and password handling in a web application?
I'm looking at putting together a website aimed at ordinary users that will handle personal data which I don't want to be compromised. How can I make the site secure but also usable?
It seems most ...
6
votes
3answers
50 views
Accessing secure content
Which of the permutations for accessing secure content do folks prefer? In this instance I'm referring to a saved quote and have usernames, email addresses and quote reference numbers available.
...
