I've got a form with the following inputs:

  • First name
  • Last name
  • Email
  • New Password
  • ReCaptcha
  • Terms (checkbox)

I'm thinking about pre-filling the following for sure with the same values that were previously input by the user: First name, Last name, Email, Terms (checkbox).

But should I also do that for the New Password and Re-enter email fields?

If a user tries to sign up with an email that already exists in the database, it will return a form error. Should I then have the Email still pre-filled?

I think it will be safe for the New Password field not to be pre-filled to make sure the user remembers their last input password by having to fill it in again.

  • 1
    Pre-filling the password is not only about UX. Even if you're using TLS, the password will still be inside the document in plain text (e.g. when using page -> save as).
    – Prinzhorn
    Apr 16, 2014 at 5:53
  • What does TLS stand for? Apr 16, 2014 at 5:57
  • Also known as SSL or HTTPS, when the data is transmitted securely.
    – Prinzhorn
    Apr 16, 2014 at 5:58

3 Answers 3


I'm thinking about pre-filling the following for sure with the same values that were previously input by the user: First name, Last name, Email, Terms (checkbox).

I think you are right to do that.

But should I also do that for the New Password and Re-enter email fields?

In the case of an error with the e-mail, I think that you should pre-fill it anyway so that the user won't have to fill it again, most of the time, it's just a little error that can be corrected easily, more easily than actually re-typing the entire e-mail two times.

For the password, in my opinion, it depends on the restrictions you putted, but if you just want a password with a certain (relatively small) number of any type of characters, then I think that your users should still remember their passwords...
You also need to take in account that the fact to have to re-fill a form is really bad for the UX so you should try to keep the number of fields to re-fill as small as possible.

  • 1
    Agreed, refilling a form you just filled out is nasty stuff indeed.
    – Franchesca
    Apr 15, 2014 at 18:32
  • Yes, I agree with your answer too ! Apr 15, 2014 at 18:34
  • The password requirement is to be least 6 characters long, and no max limitation on the length. Apr 15, 2014 at 19:51
  • But I guess I can re-fill that field too. Apr 15, 2014 at 19:55

Re-entering data is always a pain for the user, so avoid forcing them to do so where possible. If you have 2 password fields (a 2nd for confirmation), you could reduce the pain by just blanking the 2nd confirmation field so they only have to retype it once.

If it was data in a field which caused the error, it is nice to have the cursor on that field so the user is ready to go. If you know every character in the field is wrong you may also want to preselect the entire text so the user can start typing to delete the existing entry.

  • I have only 1 password field. So should I keep it filled if there is an error with it? And I got rid of the second email input field. Apr 15, 2014 at 19:49
  • Depends on your use case. If your user mistyped their password is it easy to reset? What if they mistyped their email too? Are these accounts free or is there a cost? Are the credentials linked to sensitive information e.g credit cards at any future point? You need to decide on the right balance between reducing inconvenience for the user and making sure the account credentials are what the user thought they entered. It is hard to give advice without knowing the use case.
    – Franchesca
    Apr 15, 2014 at 20:44
  • If they mistyped both their email and password, it's lost. But since they won't be able to confirm their account, the account will then expire after X amount of days. Account creation is just for a basic (free) account. After that having an account people will be able to upgrade. But that's after the sign up proces is complete of course. Otherwise they don't have access to their account. Apr 15, 2014 at 21:00

I would have all fields pre-filled except the ReCaptcha

If the user enters an email that is already in use I might redirect to a log-in page with the email pre-filled. (with an option to go back and have the form still be pre-filled) This is of course assuming e-mail is the username to log in. Otherwise there could be an option for sending a username reminder.

For password security, the field can be filled with a placeholder while the real password is remembered on the server side.*

Of course it might be even nicer to do validation with HTML5 so things like invalid email addresses are caught before the server is even involved. Additionally, if JS will be required for your site, I would even consider just using AJAX for the form submission rather than force a page reload on errors.

*The backend of using a placeholder could be a bit tricky, so here is my recommendation.

  1. Remember the password serverside (most likely in a session variable)
  2. Make the placeholder out of tab characters (normally untypeable, yet submit correctly)
  3. Upon submission, check for modifications to the placeholder
    • If the new password contains no tabs, use it
    • If it is the original placeholder, use the saved password (of course check that it exists as a session variable)
    • If it's a mix, error and clear the password in the form

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.