Questions tagged [login]
is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user
2
votes
1answer
47 views
Example workflow when changing a site's identify provider
I'm switching a site from ADFS/AD to Azure B2C/AAD and require users to reset their password. Users will also see different log in screens. I'm struggling to find an approach where users won't be ...
1
vote
1answer
88 views
Users asking to reset password in account registration
Ive been pouring through responses in a customer satisfaction survey we put in our account registration and I've noticed a few responses that surprise me. Several people have gone to account ...
1
vote
2answers
69 views
Should users be shown a login page or the same page they were in after their session timer expires?
Currently I am designing a security product for which the session timer is 15 mins after you will be logged out. Should I
a) Show the user a small modal which says they have been logged out
b) Show ...
0
votes
2answers
75 views
After login users must accept new conditions
I am wondering which action should I use when customer change terms of usage and conditions.
Flow is:
User login
New conditions appear
User to get access to portal must accept conditions
If user ...
0
votes
2answers
126 views
User friendly transition between signup page and login page
I work on a website where users:
fill in a registration form (with only 2 fields: password & confirm password; each user have a unique token which is stored in the URL)
then land directly after ...
2
votes
2answers
96 views
Asking user to login in the middle of a purchase in a website used years ago
If a visitor tries to make a purchase on an website from which they made a purchase maybe a few years ago, during checkout it might happen that the user does not remember he has an account and as I ...
5
votes
2answers
160 views
Perceived security of magic link/passwordless login
As far as I've read, passwordless login like Slack uses (user inputs their email and then clicks on the login link in their email) is becoming more common and is just as secure as logins that require ...
0
votes
1answer
85 views
Phone number login and verification for mobile apps
Can someone shed some light on the security behind mobile phone logins on mobile apps?
Uber and Lyft ask the user to login using their mobile phone, I'm assuming because it is a more unique ...
2
votes
2answers
92 views
How long do you keep your customers logged in? (sessions and authentication)
I was curious how long do you think we should keep users logged in before they're required to sign in with username and password again?
I was wondering if there's any resources or studies done to ...
1
vote
1answer
41 views
How to inform the user they have been logged out from their previous account when logging in to a new account in a new tab
We have multiple products that belong together, a suite of products. They all share a single-sign-on solution ie users can log in to one of the products and are automatically logged in to all of the ...
1
vote
2answers
76 views
Social Login - Icon only or Icon with Text?
There is a Post here but the answer doesn't fit because everyone knows the Social Login Logos.
OK, so right now I implemented the Social Logins into my Website and I am curious if the User ...
0
votes
2answers
61 views
How to prompt existing customers to change their email
I'm looking for some UX examples to how other companies have handled this situation:
Scenario:
Devs are using an old password encrypting method (sha1) I believe and need to change it to a more secure ...
-1
votes
1answer
45 views
Error message in login
In the login page of my software, there are 3 input fields - organization, username, and password.
There isn't an option to register, but the registration is done by the organization manager.
...
2
votes
1answer
92 views
How to manage logged in status when the user clicks back button?
Something I have had trouble understanding the technical/implementation requirements is what should happen to a user's logged in state when they press the back button immediately after logging in (or ...
1
vote
1answer
39 views
What is the general approach on Login/Register Forms Presentation
So I am not sure which option is better for the User, to have a Modal Open when the User clicks on a Login/Register Button on the Navbar or if an external Page is the better approach?
Because often ...
3
votes
1answer
108 views
Login form: User ID and Password in same page vs User ID in the first page and password in the next [duplicate]
Some major sites like Google and Amazon take 2-page approach for signin. They first ask for ID and in the next page ask for password.
What is the advantage in this against single page signin process?
...
1
vote
2answers
118 views
Why do we put login (with social media) buttons on the bottoms of login forms?
Like this: https://dribbble.com/shots/4414790-Modal-login-screen-Sketch-freebie
I never see them on top.
Is there a reason?
1
vote
1answer
98 views
Fullname vs username and how to ask for username after Social Login
I am building a mobile application where users can post/rate songs they like.
I have three ways of registering: email+password, facebook login and google login.
From my personal experience, some ...
0
votes
1answer
142 views
What is the optimal time for a user on Login Page?
Google Analytics shows that my users need 30 seconds on average to complete the login, while a lot of password resets happen.
What is the optimal timeframe a user should spent on the login page?
Is ...
1
vote
2answers
136 views
Sign-up and Log-in for two different sets of users
TL;DR / PROBLEM SUMMARY
Business users should only sign up and login with the email/password option using their work email address. They cannot login with social login options.
Personal users can ...
1
vote
1answer
186 views
Reasons for seemingly inefficient design of Evernote login process
Evernote's login form works like this:
When you go to their website, there is no login form. There only is a form for registering. If you enter your login credentials into that form, it won't log you ...
0
votes
2answers
153 views
Are there any design guidelines to Sign in with SSO (Single Sign On)? [closed]
Should Sign in with SSO be a button? Or should it be a link? If a button, should it be in red color, or black, or blue, etc?
Check the link "Login with SSO" in this example: https://trello.com/login
1
vote
2answers
71 views
What should be the flow if user used social log-in at first then tried to login via email after?
Let's say the user signs-up via Facebook. However, some time passed and the user forgot that they signed-in via Facebook and tried to log-in using their email.
Usually, for other apps, the login just ...
6
votes
4answers
4k views
What are the differences between “Remember me” and “Stay signed in” functionality?
For my understanding:
"Remember me"
We store password and username without login.
User clicks the login button and is logged in.
"Stay Signed in"
We store password and username with login.
...
1
vote
1answer
52 views
Force full registration now or only when needed?
I'm creating an app where most users will only use it temporarily, like guests at an event. For this reason I used Firebase Anonymous Login, to where they just supply a name and they're ready to go ...
0
votes
0answers
49 views
Complex naviagtion heirarchies
What's the best way to organize navigation for an online tool in this situation?
I'm trying to create a template for reuse.
Ex:
- Corporate Website (Brand 1) (contains links to secured site/...
0
votes
2answers
64 views
Mobile log-in: how to divide two types of user logins and two methods of logging in?
So I'm designing a modile/table log in page. There are two types of users who can log in because the functionalities of the application depend on what type of user they are. Employees and managers.
...
4
votes
1answer
51 views
Web Application best practice: ephemeral session or expiring sessions?
While working on an application using Node.js and Express, I was finding an interesting and perplexing issue in my UX testing. The application had session settings for "maxAge: 24 hours" and "...
0
votes
1answer
49 views
What is the disadvantage of automatically determine for the user whether it is a sign-in or a sign-up based on whether email exist?
There is question Is it good to automatically sign up a user if he doesnt have an account?, but they focus on OAuth signin. They answer it is better because there is less friction, more convenient. ...
0
votes
1answer
126 views
Is NOT being a social network a benefit? [closed]
I'm working on a new website project that requires users to log in to access the content, and once logged in they can publish, share and follow content.
Since logging in is a required action to gain ...
1
vote
0answers
90 views
When to ask for login?
I currently own an online store for video games and I use the Stripe API. This is the current order of events: Add to cart > Checkout > Enter Card Info > Charge > Download Item, although to battle ...
1
vote
1answer
75 views
When user check the “Keep me signed in” on login page of the website, Should we also mention the duration?
Should we do this?
or this is enough
0
votes
1answer
100 views
Are there any science based studies on separating username and password in two screens?
I was trying a similar approach to google which login in 1 page and password in the second but a coworker said that for accessibility reasons password and login should be in one screen. Is there any ...
0
votes
0answers
141 views
Best practices for user expiration on a web application
I have a web application with a simple custom made authentication mechanism.
It doesn't feature two factor authentication or deactivation/locking users functionality.
The application is not storing ...
0
votes
1answer
44 views
When to log in the user during shopping process?
I need to make sure the users are logged in (and thus registered) before they can purchase a product in a game-related platform that I am working on.
My question is if there's the best moment for ...
0
votes
1answer
61 views
Using only phone number and 2-step verification as login
Is requiring the user to login using phone number and 2-step verification bad design? I have only seen 2-step verification as an EXTRA layer of protection, not a requirement. The only thing similar is ...
0
votes
1answer
81 views
Does a basic login form need to state required fields to pass accessibility?
One of the accessibility criteria is "3.3.2 Labels or Instructions" and one of the ways to meet that criterion is by identifying required fields.
https://www.w3.org/TR/WCAG20-TECHS/H90
Is a website ...
0
votes
1answer
92 views
Flow for alternate (to SMS) security verification
For our 2FA (2nd Factor Authentication) process, we default to having an SMS sent to the user's phone.
This is causing issues for users who can't receive SMS messages; eg, they're overseas.
The ...
0
votes
0answers
32 views
Login Flow in a Shopping App - Best Practice
I'm developing a shopping application for mobile and web platforms.
This application needs to know the user's location in advance to work properly.
Looking at applications with the same ...
3
votes
4answers
212 views
How to prevent from creating an obsolete account for a returning user
There is an application that for many users is a daily driver but just for a short period of time. Then they would probably uninstall it or change their phone before they need to use it again, and ...
0
votes
5answers
86 views
How to represent a non-mandatory option on a login screen
Does the below login form convey that users can log into a default product or that they can specify it manually?
Username and password field have placeholders and no default values. However, the ...
4
votes
2answers
249 views
Showing avatar on login
When the user enters a valid email on the login like Google did some time ago, is there any problem to show the avatar?
Does make the experience better?
Is a there is any security risk?
3
votes
1answer
311 views
Do we still need a Remember Me button on websites? Or can we rely on modern browsers to handle this?
I recently had a discussion at work about whether to include a "Remember Me" option on our website. Altough I was initially in favour of the idea, I later realised that most browsers already provide ...
1
vote
2answers
91 views
What does a federated or federation sign on mean for the UI?
A product manager recently explained that we want to start looking into a federated sign in to work more nicely with our partners. He suggested a two-step sign in approach (like google accounts) where ...
0
votes
1answer
78 views
2
votes
3answers
102 views
Is it a best practice to put a login form in the website's footer?
I am really wondering if it a best practice to put a login form in the website's footer? There's a login link in the menu bar so I am not really sure if its still needed.
0
votes
0answers
58 views
user signup: how to help users who forgot username and for that should i allow only unique email in database Ask Question
I am creating a signup form for my project.
I want the username to be unique and they can provide a valid email address. I dont feel there is any need to keep unique email for each username.
But the ...
0
votes
1answer
60 views
Should the password field be cleared if there's a connection error?
I have a desktop application which has 3 fields for logging in: Username, Password, and Server URL.
After reading similar questions, I've decided that my application will reset the password field if ...
0
votes
2answers
58 views
Is there a way to get a sample of non-login users of your product?
I have an issue that my users have problems with the sign-up page and many of my users spend much time using the product without login.
I plan to interview some of them, but I don't know how to get ...
0
votes
2answers
57 views
Login workflow for an occasionally used service
I'm creating an online service for companies to manage registration for annual events. Event attendees will need some way to login to the system to manage their booking, payment, special requests, ...
