Tag Info

Hot answers tagged

111

Do note that, even if users "expect" most sites to log them out automatically, in certain circumstances (eg. a shared computer at a friend's home/library/Internet café), they will need an explicit "log out" link to assure them their session is terminated and no one else can access their account. Another valid use case is when users have multiple accounts ...


58

Users do log out conceptually - but not explicitly. Users have become conditioned to sites managing security on their behalf by automatically logging sessions out. They know this because they are continually having to re-login. As this has become expected behaviour, in their mind leaving a site is 'fine' and log-out 'will happen'. But actually this ...


30

Admittedly, I'm not a Kinect user, but to me this doesn't seem like a good fit for a gesture. Gestures are useful for actions that: You want to do frequently - The point of gestures is making something easy to do; and you aren't likely to remember a gesture for something you do rarely. Are easily reversible - It is easy to accidentally make a gesture, so ...


25

The original poster is talking about how many site are hiding the logout link. Facebook makes you open the account menu to see the logout link. My guess is that there's really no need to log out of your account these days. Public computers are not used as much anymore, so there's no need to protect your privacy. Everyone owns their own personal laptop ...


18

By encouraging users to stay logged in, service providers like Google and Facebook can not only make the login experience less of a hassle, but (perhaps far less innocently) gather browsing data and habits on their users (even when they're not using the service) to enhance advertising intelligence. And that's something that makes me wary.


18

Some sites show this in the header to indicate a presumed identity for low risk actions (like add to wishlist), but you can't actually buy anything until you log into the site. So "log out" here would be misleading. Sometimes "Not John? Sign out." is shown as in place of 'sign out' when properly signed in. This is simply a more human way of speaking to ...


18

On the XBox, there is the standard Guide gesture which pauses games and opens a menu where you can e.g. quit or restart the current level. Maybe you could use such a menu to offer a log out button that the user can touch or push. Use the Kinect Guide gesture to pause game play or open the Kinect Guide. To do this, position both arms at your sides. ...


17

I have a web site that offers various services for weddings, so my target audience has pretty diversified technical skills. My unequivocal conclusion after 2 years running the site is users do not log out. Or they just leave a page open, and then I am logging them out after 10 idle minutes, or (much worse scenario) they just close the tab/the browser with ...


16

The most expected result would be to duplicate the default redirect that would happen in typical login. For example, if there is a "Login" link in the global nav, the expected result logging in would be to authenticate the user, then land the user back to the page from which the login initiated. If there is a section of the site that is gated by login, and ...


13

Naming it "sign out" is actually missing something important; clicking "not Bob" doesn't just sign you out of Amazon, it presents the page to sign in. So you're not really just signing out, you're signing back in as someone different; because you're not Bob, you're Alice. I think this is an important distinction from the current answers; you're doing more ...


11

You can always come up with a scenario in which that warning would go by unnoticed - think lunch break, or an urgent meeting. So I would at first try to make the existence of those sessions as transparent to my user as possible: reset the session timer as often as possible (e.g. whenever activity is detected) to minimize the occurrence of timeouts if the ...


11

Have the system log you out if you walk away. The workflow becomes walking up to the camera, holding up a QR code to log in, doing your work, then walking away. Next person repeats the same steps. If there are cases where a second user enters the range of the camera while the first is still present, or the same user needs to log in under a second account, ...


9

As has been noted above, this depends on the app. But even before the app, this depends on the user. Advanced users adapt their behavior to the specific app, based on a balance between the app's sensitivity and their own paranoia security awareness, like @Goodwine described. Beginners do not log out. I've spoken to a number of not very computer-savvy people ...


9

I believe that a session time out falls under the category of "timed responses". To meet accessibility then, the user should be given the chance to extend, or at the least, be notified it's occurring. Notifying the user about the length of the session is not a requirement, though it should be determined on a "per application basis". For instance, if it's ...


9

As you have mentioned in the comments to the answer from @dan1111 logging in is as simple as holding up a QR code Could you not have a second QR code which the users hold up to log out? Alternatively you also state that spoken word input is acceptable so why try to re-invent the wheel - Just have the users state "Log me out" (I assume here that you ...


8

Mint.com's is a very nice approach: I would also strongly recommend against alert() - style message boxes to warn the user about their expired session (some websites do this). You can't rescind it, so if the user had left for lunch, they'll come back to the message box, click "OK" to save their session, and then see themselves logged out anyway. The ...


7

It depends on the website / application They do I can tell you that users DO log out, specially when there is a poor management of user accounts on a PC. I have seen people who share their PCs with their family, but do not have multiple users, so they have to keep logging out when they access the same systems (Say... same email provider), and when they ...


7

The first thing to understand is that users don't care about sessions, the session is something you as a developer are forcing onto the user to meet your security/application needs. In an ideal world the session would never expire, like Facebook, Hotmail etc. That said in some situations such as bank sites we still need to expire sessions as we don't want ...


6

Amazon is another example. I didn't notice this trend until you pointed it out. Someone else asked the same question: Why would a web site hide the log out button? Here's a short post on it that pretty much says: By hiding the logout feature, you're more apt to simply close the browser or tab, but effectively remaining logged into a service. This allows ...


5

For the most trouble-free experience, you should have the user log in again right there. Many users have some sort of password manager or use their browser to manage passwords (or scribble it on a sticky note affixed to their monitor… ack!). The only way to assure the user has completed their end of the password change is to log them out and have ...


4

Another reason: for many users, it is more understandable. "Log in" and "Log out" are odd concepts, written in computer-speak, and with terminology left over from timeshare machines. (What are you 'logging', anyway? Are you a log now?) We're so used to them after 40 years, but they still trip up new users. The language "If you're not FOO" is in the user's ...


4

I bet it's because sites are organizing their nav/menus based on each item's frequency of use--and users don't log out very often.


4

In my current role, the users who I interact with are mostly system administrators. They generally do log out of applications (websites, web apps, desktop apps) when they are done using them. If it's the middle of the day and they're simply stepping away from their workstation for a few minutes, then they will rely on locking their workstation. If they're ...


4

I have actually come to appreciate this approach, especially with Amazon, as I commonly use several accounts (employer, personal). I regularly need to answer the question "What account am I signed in as" and if it is the wrong one, I need to switch without much hassle. After all, I usually only care who I'm logged in as if I'm going to make a purchase, and ...


4

Most users with college level age and experience, do not log out on their personal computer, and often do not log out on public computers. I participate in many Facebook groups comprised of users with approximately a college level age and experience. Very frequently, a 3rd party will post on their wall something mildly funny and or embarrassing because the ...


3

You asked for research citations... Wichita State University's Software Usability Research Lab (SURL) published research into Expectations of Users’ Mental Models for E-Commerce Web Layouts and concluded: Comparisons of the responses from users from four geographical areas worldwide show that, in general, participants had similar expectations on the ...


3

Default answer is probably to ignore it. If the user has the correct mental model for not logging in they'll not be confused by not logging out. Best answer is to do some quick research and find out if your users have that mental model. If they don't, find out what they are thinking and design your solution to help move their understanding to match the ...


3

Session expiration time is context dependent, and more Security related than User Experience related. In fact Security and User Experience have divergent goals here. Users dislike to log in again when session expired, but from a security viewpoint short session times protects our users from fraud. In Sweden at least, there is a silent agreement among ...


3

It is correct to say it depends on their risk, and the usability of the site. I was a NetBank early adopter, and have used used it since before it was a browser application. I cannot share any hard facts with you, as I am an ex-CBA employee. In earlier years it was possible to have multiple concurrent logons in multiple tabs on the same browser. Thus it was ...


3

Depending on the use case of your platform it might be not so funny if you can't turn things off instantly. In other words: If the motion capture software doesn't capture it properly and doesn't turn off. Therefore I'd suggest using something highly reliable. The most reliable thing is less than a gesture, something that can easily get recognized: No ...



Only top voted, non community-wiki answers of a minimum length are eligible