Tag Info

New answers tagged

0

This is difficult to test because there is very little information you can use to tell whether the users coming into your website are using strong passwords already or not. One way I can think of at least trying to work out the potential behaviour is if you can measure the amount of time people spend on the 'enter password' field before they click submit, ...


0

Anecdotally, I personally use the password requirements listed to generate the strongest possible password with my password manager. I find these very useful, and they immediately tell me if I need to turn off special characters or if I get to leave them on, if I need to reduce the length of my password or if I get to keep it long, etc. As an addendum to ...


2

Well, it's a bit of a "dirty" manipulation that could direct a user's potential dissatisfaction at himself rather than at the system :). A user arrives at page, creates an invalid password, gets an error message that says "The password must be over 8 chars". He looks for the password rules on the page. If he doesn't find them, he becomes angry with the ...


0

The way Netflix seem to do it is simply asking for your phone number on sign-up, and then running a script at a certain time every day (unsure which time it actually is) to cross-check accounts. If an account seems to be a duplicate of another a flag is raised on their system and a human manually checks it. If they determine that the account is a duplicate, ...


4

We use phone verification that limits duplicate accounts. We ask them to text the number they see on the screen. Note, we don't ask them right away but we do limit pro features that require verification. We noticed good conversion rate of users and also less duplicate accounts (since most users have one cell number :) One funny thing we noticed is that ...


5

Right now, you should not be solving this problem. Not only is it a problem you do not have, but solving it too early may mean you will never have the problem. Lemme splain. Lemme sum up. The more you try to reduce the % of fraud, the more it costs to prevent each instance of fraud. This cost is in the time you spend directly preventing fraud, the ...


1

The ideal is to make the "means of identification" be the information stored in the account itself. Easy example, if your app has significant social functions, then a free user isn't going to want to have to go through a process of re-friending all their friends using their new account every week, losing the ability to see/edit stuff generated by their ...


1

The best protection will probably be a combination of methods. For a first line of defense, use cookies (and/or some sort of supercookie). That will protect against people who use their own device and don't want the hassle of reloading their browser. Basically, once someone has logged into the service on a particular browser, don't allow them to create a ...


5

I think that there's no real solution to your problem. That might be hard to hear, but there's no way to gain any security without sacrificing your user experience. Instead, we just need to pick the "least-worst" choice. Using a phone number or credit card number for anything is grounds for an immediate bounce from most users. If you looked at a study, you ...


10

Consider using federated user authentication from some social network like Facebook or Twitter. You can suggest to your user that your use of social credentials is a service to them, saving them the hassle of remembering and maintaining a different username/password set for your site. Should they change their password on the social network, your site would ...


33

If you are providing a valuable service/product there will always be people trying to "cheat" the system and get in. Providing a free trial period is an industry norm and over time users may sign up for more than one trial but that will get old fast. I would worry less about ensuring authentic users and focus more on providing that great content. If you're ...


13

This is a tough issue that I'm not sure anyone has really solved yet, but here are my thoughts for your 3 solutions. Phone number Yes this might be a bit personal or creepy but I feel like it's becoming less so since people are actually using their phones less and less. You'll want to be clear that you're not selling their phone number to a marketing ...


7

Honestly, a valuable product. You are not the first one to offer trials. You would scare more potential customers off than you would save through fraud-detection processes. If your customers like what you do, they will pay for it. If they use your software on a regular basis and still create a new account each time, they can't or don't want to afford it. ...


1

It's generally best to that the "teaser" actually performs an action. In the example you gave with the email, inputing their email should subscribe them to the list right away even though a secondary window might appear, this then become optional. IF they want to specify what types of emails they want or give some profile information then they can do that. ...


0

I think it's a good feature only if: the users knows that the process is not completed. You can put «Wanna receive exclusive updates? Type your email to start sign up…»; here the keyword is "start". it's enough to achieve the desired goal (receive the newsletter) but you can continue the process (customize which news you wanna receive, set a password, ...



Top 50 recent answers are included