Skip to main content
The 2024 Developer Survey results are live! See the results

Questions tagged [authentication]

use this tag for questions related to authentication in the context of security

Filter by
Sorted by
Tagged with
1 vote
3 answers
374 views

Giving user a preference to pick either TouchID or Pin login on iOS platform

As of iPhone5s we have technology like TouchID which is much secure way of authenticating user instead writing long complicated passwords. Although, we also have a pin login which does require minimal ...
Low Ego's user avatar
  • 13
1 vote
5 answers
441 views

How can I make a login form seem more trustworthy?

We have a web app where the user has to log in at the beginning. The login shows our company logo, the name of the product incl. logo of the product and the login form: I showed this app to a test ...
Simon's user avatar
  • 625
1 vote
1 answer
287 views

How to encourage users to download an app to complete strong authentication (two factor)

I'm designing a strong authentication (two factor) solution for a website. Users will be forced to use two factor (legal requirement). We have two supported methods an SMS verification code texted to ...
Lisa's user avatar
  • 203
1 vote
3 answers
237 views

E-mail requirement in game signup process?

I have to make a signup form for a mobile web based game. I want to make is simple. I'm going to request an username and password from the player. May I request an e-mail, and send an activation mail ...
user avatar
1 vote
1 answer
241 views

When should "Log on" or "Log off" be used? [duplicate]

Possible Duplicate: Using “Sign in” vs using “Log in” I'm porting an old application that has a "Log on" screen. When would I use "Log on" vs the alternatives (Sign In / ...
makerofthings7's user avatar
1 vote
1 answer
100 views

How would you visualize authorization deviation with 90+ rules?

Users can preselect an authorization set (1). And, later on, modify the set. As a user, I want to see how the original authorization set differs from the one I changed. So I can see which ...
YengarIV's user avatar
1 vote
4 answers
3k views

How to Block Multiple Logins /Sign Up?

So, I have an App where the user needs to sign up to access the app. I'm planning to run an offer where user can order that item only once in a day. But I have the doubt that he may change login Id (...
Anas Idris's user avatar
1 vote
2 answers
134 views

Presentation of public and private instances

In my application there exist publicly available and browsable objects. However, users are also able to register, authenticate and then author and manage their own personal instances of these same ...
Derek Chasse's user avatar
1 vote
2 answers
111 views

App authentication providers

I'm in the early stages of developing a new Android app which will require authentication (data driven app using Firebase database with user specific data). I've considered authentication options and ...
Jonny Wright's user avatar
1 vote
1 answer
60 views

For a closed off API, is not more friendly to have only a 'secret' - no 'username'?

Quite a few API's have something like a 'username' and a 'secret'. Is there anything against the decission to just work with a (generated) secret? Of course the secret should be long enough - GUID ...
Dirk Boer's user avatar
  • 965
1 vote
1 answer
231 views

Common email pitfalls for social login integrations

We are planning to implement social logins on our site. (Potentially via a service like Janrain or Auth0.) For us the user's email is key, so we will implement only services that expose the user's ...
perelin's user avatar
  • 113
1 vote
1 answer
47 views

Is using screen unlock pattern feature a good option for login on mobile web

trying to come up with way(s) to reduce the users' drop off rate on mobile login/registration on a mobile web ecommerce site. 1 method i think could work and would like to probably test would be a ...
Blue Ocean's user avatar
  • 10.7k
1 vote
2 answers
731 views

Linking multiple third-party accounts for a mobile app?

My user wants to access personal content from her Spotify, Soundcloud and other third-party accounts through one native mobile application. Imagine a music player for any personal library. The ...
Dan's user avatar
  • 11
1 vote
2 answers
402 views

Authentication pop up on a desktop app: what if it is much bigger than main app window?

I am working on a desktop app that requires authentication. It allows federated authentication using different services, Google among them. Most probably, we'll use a pop up with a browser window to ...
rgargente's user avatar
  • 111
0 votes
4 answers
281 views

At what step in the user flow of a travel booking app would 2FA OTP be needed

i'm designing a 2FA OPT feature for an app that lets users book flights and trains. As users are able to store personal information including their payment details, this level of verification is ...
Blue Ocean's user avatar
  • 10.7k
0 votes
2 answers
278 views

2FA into the login page (without email or phone number)

I have a question regarding UX of the 2nd factor authentication (2FA) process. It is common in the authentication process to ask for user id (commonly email) + password, and in a second step ask for ...
lcssanches's user avatar
0 votes
1 answer
136 views

Automatical Button-Less Login

I'm working on a project where we want to setup a button-less login form. The idea is, if you enter your credentials correctly, you will get logged in automatically (don't have to press ENTER or ...
CoderPi's user avatar
  • 101
0 votes
1 answer
168 views

Smartphone-only apps: consequences of limiting one account per phone number?

For smartphone-only apps that require each user to be a person (apps where there is no room for people to have multiple accounts), what are the negative consequences of limiting each phone number to ...
user avatar
0 votes
2 answers
174 views

Back to login page authentication expiration behaviour

If a user presses back after logging in to a website should the authentication cookie be set to expire because the user expects to be logged out if they can see the login page or not?
Calum's user avatar
  • 105
0 votes
2 answers
67 views

Putting authentication in preferences

If authentication is completely optional, and provides next to no features, is it okay to dump it in a preferences tab?
Jack Hornsby's user avatar
0 votes
1 answer
340 views

Why do you need a login/ register button?

I'm wondering if it makes sense to have "login/register" buttons displayed on the website header. The client would be redirected anyway to the register/login page whenever it tries to access a ...
themihai's user avatar
  • 131
0 votes
1 answer
47 views

Whats the best approach to restoring access to a user who can't access their email?

I'm trying to think of different methods to restore an account to a user who can no longer access their email. For my project, regaining account access is very important, throwing away an account is ...
Trevor's user avatar
  • 187
0 votes
2 answers
57 views

How many times should an unverified user be allowed to post on a social site?

If you allowed user to post content on social media site prior to verifying email, in order to increase conversions, how many times should he be allowed to do so? What anti-spam measures you can put ...
Milami's user avatar
  • 1
0 votes
1 answer
259 views

Best way to suggest enabling cross-site cookies with Brave

For technical reasons (OIDC library uses CORS requests to renew API access tokens), our application requires that when using the Brave browser, the security shields built into Brave be either disabled ...
Josh G's user avatar
  • 103
0 votes
1 answer
40 views

Which is the best way to present to the user a 2-categories-login-field?

I have a login screen that has two ways of authentication: via e-mail or a numeric code. So i'm wondering if i should make the user decide(use a tab-bar or a switch...) which kind of login auth he ...
Alexandre Soares's user avatar
0 votes
1 answer
254 views

Webpage behavior for an expired authentication referral link

I'm working on a Single Sign On service. An example use case I'm trying to solve is as follows: User A sends User B a link to www.exampleapp.com/resource/abc. This resource requires authentication ...
dwjohnston's user avatar
0 votes
1 answer
51 views

Allow users to mark asset as "found" without account?

I have a website where a user can post something they are looking for and the ad gets distributed out to a public board (technically multiple) anyone can see. Up to this point (99% of the site) my ...
DasBeasto's user avatar
  • 15.4k
0 votes
3 answers
4k views

Better Registration for Mobile Apps

We want to let users register on our Mobile App with their Phone Number, then verify it using SMS without the need to enter a password -- may be like what WhatsApp is doing with their on-boarding ...
AbdelHady's user avatar
  • 653
0 votes
3 answers
581 views

Sign Up and Sign In widget on every page: Slide-down Panel or Lightbox

I have a question about implementing a sign up and sign in widget that works on any page on a site (i.e. without redirecting users to a sign in page when they want to log in to interact with content ...
firasd's user avatar
  • 89
0 votes
1 answer
173 views

How should I go about integrating Mozilla Persona in a website?

For those who've never heard of it before, Mozilla Persona is a single sign-on method that's pretty strict on privacy. For me, as a website administrator, it means that I don't need to ask the user ...
Yaron Tausky's user avatar
0 votes
1 answer
277 views

Separators in user config screen (Polymer/material) [closed]

I managed to create a usable screen to manage credentials. It's a bit tricky, because users can set login/password pair, as well as Facebook. However, a user could have just facebook, just login/pass, ...
Merc's user avatar
  • 277

1 2
3