Questions tagged [authentication]
use this tag for questions related to authentication in the context of security
131
questions
1
vote
1
answer
285
views
How to encourage users to download an app to complete strong authentication (two factor)
I'm designing a strong authentication (two factor) solution for a website. Users will be forced to use two factor (legal requirement).
We have two supported methods an SMS verification code texted to ...
- 203
1
vote
3
answers
191
views
E-mail requirement in game signup process?
I have to make a signup form for a mobile web based game. I want to make is simple.
I'm going to request an username and password from the player.
May I request an e-mail, and send an activation mail ...
user51865
1
vote
1
answer
240
views
When should "Log on" or "Log off" be used? [duplicate]
Possible Duplicate:
Using “Sign in” vs using “Log in”
I'm porting an old application that has a "Log on" screen. When would I use "Log on" vs the alternatives (Sign In / ...
- 1,028
1
vote
2
answers
48
views
What should the default 2FA method be for a user opening an account?
Our application (investment solution) asks users to set up a 2FA method after setting their password during onboarding.
We offer multiple methods of 2FA; memorable questions, text message security, ...
- 13
1
vote
1
answer
97
views
How would you visualize authorization deviation with 90+ rules?
Users can preselect an authorization set (1). And, later on, modify the set. As a user, I want to see how the original authorization set differs from the one I changed. So I can see which ...
- 75
1
vote
4
answers
2k
views
How to Block Multiple Logins /Sign Up?
So, I have an App where the user needs to sign up to access the app.
I'm planning to run an offer where user can order that item only once in a day.
But I have the doubt that he may change login Id (...
- 41
1
vote
2
answers
133
views
Presentation of public and private instances
In my application there exist publicly available and browsable objects. However, users are also able to register, authenticate and then author and manage their own personal instances of these same ...
- 11
1
vote
2
answers
110
views
App authentication providers
I'm in the early stages of developing a new Android app which will require authentication (data driven app using Firebase database with user specific data). I've considered authentication options and ...
- 111
1
vote
1
answer
59
views
For a closed off API, is not more friendly to have only a 'secret' - no 'username'?
Quite a few API's have something like a 'username' and a 'secret'.
Is there anything against the decission to just work with a (generated) secret?
Of course the secret should be long enough - GUID ...
- 935
1
vote
1
answer
218
views
Common email pitfalls for social login integrations
We are planning to implement social logins on our site. (Potentially via a service like Janrain or Auth0.) For us the user's email is key, so we will implement only services that expose the user's ...
- 113
1
vote
1
answer
47
views
Is using screen unlock pattern feature a good option for login on mobile web
trying to come up with way(s) to reduce the users' drop off rate on mobile login/registration on a mobile web ecommerce site.
1 method i think could work and would like to probably test would be a ...
- 10.6k
1
vote
2
answers
668
views
Linking multiple third-party accounts for a mobile app?
My user wants to access personal content from her Spotify, Soundcloud and other third-party accounts through one native mobile application. Imagine a music player for any personal library.
The ...
- 11
1
vote
2
answers
399
views
Authentication pop up on a desktop app: what if it is much bigger than main app window?
I am working on a desktop app that requires authentication. It allows federated authentication using different services, Google among them. Most probably, we'll use a pop up with a browser window to ...
- 111
0
votes
4
answers
273
views
At what step in the user flow of a travel booking app would 2FA OTP be needed
i'm designing a 2FA OPT feature for an app that lets users book flights and trains. As users are able to store personal information including their payment details, this level of verification is ...
- 10.6k
0
votes
2
answers
255
views
2FA into the login page (without email or phone number)
I have a question regarding UX of the 2nd factor authentication (2FA) process.
It is common in the authentication process to ask for user id (commonly email) + password, and in a second step ask for ...
- 103
0
votes
1
answer
134
views
Automatical Button-Less Login
I'm working on a project where we want to setup a button-less login form.
The idea is, if you enter your credentials correctly, you will get logged in automatically (don't have to press ENTER or ...
- 101
0
votes
1
answer
151
views
Smartphone-only apps: consequences of limiting one account per phone number?
For smartphone-only apps that require each user to be a person (apps where there is no room for people to have multiple accounts), what are the negative consequences of limiting each phone number to ...
user121402
0
votes
3
answers
2k
views
Good UX for validating both phone and email
A website requires users to validate their email – it's how the user receives their password creation link, and email is essential to several core workflows.
There is now also a need to collect and ...
- 12.1k
0
votes
2
answers
156
views
Back to login page authentication expiration behaviour
If a user presses back after logging in to a website should the authentication cookie be set to expire because the user expects to be logged out if they can see the login page or not?
- 105
0
votes
2
answers
66
views
Putting authentication in preferences
If authentication is completely optional, and provides next to no features, is it okay to dump it in a preferences tab?
0
votes
1
answer
323
views
Why do you need a login/ register button?
I'm wondering if it makes sense to have "login/register" buttons displayed on the website header.
The client would be redirected anyway to the register/login page whenever it tries to access a ...
- 131
0
votes
1
answer
40
views
Whats the best approach to restoring access to a user who can't access their email?
I'm trying to think of different methods to restore an account to a user who can no longer access their email. For my project, regaining account access is very important, throwing away an account is ...
- 177
0
votes
2
answers
57
views
How many times should an unverified user be allowed to post on a social site?
If you allowed user to post content on social media site prior to verifying email, in order to increase conversions, how many times should he be allowed to do so?
What anti-spam measures you can put ...
- 1
0
votes
1
answer
247
views
Best way to suggest enabling cross-site cookies with Brave
For technical reasons (OIDC library uses CORS requests to renew API access tokens), our application requires that when using the Brave browser, the security shields built into Brave be either disabled ...
- 103
0
votes
1
answer
39
views
Which is the best way to present to the user a 2-categories-login-field?
I have a login screen that has two ways of authentication: via e-mail or a numeric code.
So i'm wondering if i should make the user decide(use a tab-bar or a switch...) which kind of login auth he ...
0
votes
1
answer
235
views
Webpage behavior for an expired authentication referral link
I'm working on a Single Sign On service.
An example use case I'm trying to solve is as follows:
User A sends User B a link to www.exampleapp.com/resource/abc. This resource requires authentication ...
- 441
0
votes
1
answer
51
views
Allow users to mark asset as "found" without account?
I have a website where a user can post something they are looking for and the ad gets distributed out to a public board (technically multiple) anyone can see. Up to this point (99% of the site) my ...
- 15.3k
0
votes
3
answers
4k
views
Better Registration for Mobile Apps
We want to let users register on our Mobile App with their Phone Number, then verify it using SMS without the need to enter a password -- may be like what WhatsApp is doing with their on-boarding ...
- 643
0
votes
3
answers
581
views
Sign Up and Sign In widget on every page: Slide-down Panel or Lightbox
I have a question about implementing a sign up and sign in widget that works on any page on a site (i.e. without redirecting users to a sign in page when they want to log in to interact with content ...
- 89
0
votes
1
answer
173
views
How should I go about integrating Mozilla Persona in a website?
For those who've never heard of it before, Mozilla Persona is a single sign-on method that's pretty strict on privacy. For me, as a website administrator, it means that I don't need to ask the user ...
- 101
0
votes
1
answer
276
views
Separators in user config screen (Polymer/material) [closed]
I managed to create a usable screen to manage credentials. It's a bit tricky, because users can set login/password pair, as well as Facebook. However, a user could have just facebook, just login/pass, ...
- 277