Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user

1
vote
2answers
67 views

Sign-up and Log-in for two different sets of users

TL;DR / PROBLEM SUMMARY Business users should only sign up and login with the email/password option using their work email address. They cannot login with social login options. Personal users can ...
0
votes
1answer
48 views

Reasons for seemingly inefficient design of Evernote login process

Evernote's login form works like this: When you go to their website, there is no login form. There only is a form for registering. If you enter your login credentials into that form, it won't log you ...
0
votes
2answers
47 views

Are there any design guidelines to Sign in with SSO (Single Sign On)? [closed]

Should Sign in with SSO be a button? Or should it be a link? If a button, should it be in red color, or black, or blue, etc? Check the link "Login with SSO" in this example: https://trello.com/login
1
vote
2answers
58 views

What should be the flow if user used social log-in at first then tried to login via email after?

Let's say the user signs-up via Facebook. However, some time passed and the user forgot that they signed-in via Facebook and tried to log-in using their email. Usually, for other apps, the login just ...
6
votes
4answers
2k views

What are the differences between “Remember me” and “Stay signed in” functionality?

For my understanding: "Remember me" We store password and username without login. User clicks the login button and is logged in. "Stay Signed in" We store password and username with login. ...
1
vote
1answer
48 views

Force full registration now or only when needed?

I'm creating an app where most users will only use it temporarily, like guests at an event. For this reason I used Firebase Anonymous Login, to where they just supply a name and they're ready to go ...
0
votes
0answers
40 views

Complex naviagtion heirarchies

What's the best way to organize navigation for an online tool in this situation? I'm trying to create a template for reuse. Ex: - Corporate Website (Brand 1) (contains links to secured site/...
0
votes
2answers
55 views

Mobile log-in: how to divide two types of user logins and two methods of logging in?

So I'm designing a modile/table log in page. There are two types of users who can log in because the functionalities of the application depend on what type of user they are. Employees and managers. ...
4
votes
1answer
40 views

Web Application best practice: ephemeral session or expiring sessions?

While working on an application using Node.js and Express, I was finding an interesting and perplexing issue in my UX testing. The application had session settings for "maxAge: 24 hours" and "...
0
votes
1answer
45 views

What is the disadvantage of automatically determine for the user whether it is a sign-in or a sign-up based on whether email exist?

There is question Is it good to automatically sign up a user if he doesnt have an account?, but they focus on OAuth signin. They answer it is better because there is less friction, more convenient. ...
0
votes
1answer
118 views

Is NOT being a social network a benefit? [closed]

I'm working on a new website project that requires users to log in to access the content, and once logged in they can publish, share and follow content. Since logging in is a required action to gain ...
1
vote
0answers
78 views

When to ask for login?

I currently own an online store for video games and I use the Stripe API. This is the current order of events: Add to cart > Checkout > Enter Card Info > Charge > Download Item, although to battle ...
0
votes
1answer
95 views

Are there any science based studies on separating username and password in two screens?

I was trying a similar approach to google which login in 1 page and password in the second but a coworker said that for accessibility reasons password and login should be in one screen. Is there any ...
0
votes
0answers
115 views

Best practices for user expiration on a web application

I have a web application with a simple custom made authentication mechanism. It doesn't feature two factor authentication or deactivation/locking users functionality. The application is not storing ...
0
votes
1answer
42 views

When to log in the user during shopping process?

I need to make sure the users are logged in (and thus registered) before they can purchase a product in a game-related platform that I am working on. My question is if there's the best moment for ...
0
votes
1answer
44 views

Using only phone number and 2-step verification as login

Is requiring the user to login using phone number and 2-step verification bad design? I have only seen 2-step verification as an EXTRA layer of protection, not a requirement. The only thing similar is ...
0
votes
1answer
66 views

Does a basic login form need to state required fields to pass accessibility?

One of the accessibility criteria is "3.3.2 Labels or Instructions" and one of the ways to meet that criterion is by identifying required fields. https://www.w3.org/TR/WCAG20-TECHS/H90 Is a website ...
0
votes
0answers
26 views

Flow for alternate (to SMS) security verification

For our 2FA (2nd Factor Authentication) process, we default to having an SMS sent to the user's phone. This is causing issues for users who can't receive SMS messages; eg, they're overseas. The ...
0
votes
0answers
29 views

Login Flow in a Shopping App - Best Practice

I'm developing a shopping application for mobile and web platforms. This application needs to know the user's location in advance to work properly. Looking at applications with the same ...
1
vote
3answers
86 views

How to prevent from creating an obsolete account for a returning user

There is an application that for many users is a daily driver but just for a short period of time. Then they would probably uninstall it or change their phone before they need to use it again, and ...
0
votes
5answers
85 views

How to represent a non-mandatory option on a login screen

Does the below login form convey that users can log into a default product or that they can specify it manually? Username and password field have placeholders and no default values. However, the ...
4
votes
2answers
237 views

Showing avatar on login

When the user enters a valid email on the login like Google did some time ago, is there any problem to show the avatar? Does make the experience better? Is a there is any security risk?
3
votes
1answer
185 views

Do we still need a Remember Me button on websites? Or can we rely on modern browsers to handle this?

I recently had a discussion at work about whether to include a "Remember Me" option on our website. Altough I was initially in favour of the idea, I later realised that most browsers already provide ...
1
vote
2answers
56 views

What does a federated or federation sign on mean for the UI?

A product manager recently explained that we want to start looking into a federated sign in to work more nicely with our partners. He suggested a two-step sign in approach (like google accounts) where ...
0
votes
1answer
77 views

Is either one of provided options better?

Which one of those solutions is better and why?
1
vote
3answers
89 views

Is it a best practice to put a login form in the website's footer?

I am really wondering if it a best practice to put a login form in the website's footer? There's a login link in the menu bar so I am not really sure if its still needed.
0
votes
0answers
52 views

user signup: how to help users who forgot username and for that should i allow only unique email in database Ask Question

I am creating a signup form for my project. I want the username to be unique and they can provide a valid email address. I dont feel there is any need to keep unique email for each username. But the ...
0
votes
1answer
56 views

Should the password field be cleared if there's a connection error?

I have a desktop application which has 3 fields for logging in: Username, Password, and Server URL. After reading similar questions, I've decided that my application will reset the password field if ...
0
votes
2answers
57 views

Is there a way to get a sample of non-login users of your product?

I have an issue that my users have problems with the sign-up page and many of my users spend much time using the product without login. I plan to interview some of them, but I don't know how to get ...
0
votes
2answers
55 views

Login workflow for an occasionally used service

I'm creating an online service for companies to manage registration for annual events. Event attendees will need some way to login to the system to manage their booking, payment, special requests, ...
0
votes
0answers
52 views

Why should I split password reset and username process apart?

I was looking at a similar question, here , for some insight but it does not answer my question. I am developing a page that users get to by clicking a simple link titled "can't log in?". I was told ...
1
vote
5answers
99 views

Login or signup on landing page?

I was curious as to whether the landing page of a social mobile app should be built for a user to signup or login. This example lands on the app's signup page with an option to be redirected to the ...
6
votes
1answer
119 views

Login system for anonymous crime reporting service

I work in the digital team for a UK-based crime prevention charity. The charity has an online form where people can give information about crime anonymously, and they can chose when completing the ...
2
votes
1answer
90 views

Studies on Sign In Authentication Error Messages

So, after browsing other threads, I found some information on the question of when a user is logging in, and fails to authenticate do we give the user the message "Username or Password is incorrect" ...
3
votes
2answers
185 views

Is there a name for the UX pattern where you enter a code from an unauthenticated device on an authenticated one in order to login?

Several services such as YouTube, Plex, and XFINITY use a pattern in which an unauthenticated device displays a code for the user to enter on an authenticated device. When the user enters the code on ...
1
vote
3answers
334 views

Can I combine login and signup with a single button?

I am building a login page and I spent over 5-6 hours reading a tonne of posts in this group. I saw the following discussions Login and Register as separate pages Login Modals Login Register vs Sign ...
4
votes
2answers
164 views

Pin code - accessible mode

I'm working on the login and login creation of a secured website. It's the kind of login where a keypad is displayed, all the numbers are in a random order and you need to click on them. (ugly) ...
0
votes
2answers
49 views

Options for login [duplicate]

I'm designing login screen for a music app like gaana, wynk. I have two options Login with google and facebook Getting Username and password Which is better?
0
votes
0answers
96 views

Why do some login pages force the user to entire their username/email first, and then the password?

I am not an UI/UX designer. I am just a frequent Amazon user. For some time now Amazon appears to have been changing its login page. About half the time I would get a run-of-the-mill (what I call a "...
2
votes
2answers
100 views

Where should I place the “Stay signed in” checkbox?

I'm new to this community and it might be that this question is off-topic; feel free to suggest me to delete this post, if so. I've gazed at this OAuth pre-login window I created for quite a while, ...
0
votes
1answer
86 views

Register/Login/Sign in pages with or without main menu?

I see a recurring pattern in Register/Login/Sign in/Recover Pass/Etc pages of bigger sites, where they avoid using the full length of the main menu top bar. Frequently, they just leave the essentials ...
3
votes
1answer
96 views

Is it important to display a username to a user when logged in?

Our system header currently displays an icon and a username, as seen below: For reasons of accessibility and clarity of purpose I have re-designed it to display a clearer call to action, as seen ...
1
vote
2answers
219 views

Can we use “Continue with Email” instead of signup/login?

I was working on a product and while making the signup/login buttons I thought of providing the Continue with email/social instead of login and signup buttons separately. Will it affect the cognitive ...
2
votes
3answers
247 views

Two factor authentication: expiry of sent text message

I have been asked to research expiry times of text messages sent to a user that contain a login code. In this journey a user will identify themselves on a website and then ask for a text message to ...
0
votes
1answer
244 views

UI element for FaceID needed for iPhone X login? [closed]

Many iOS apps utilize a Touch ID icon button/element on the login screen in order to invoke Touch ID in case the user has dismissed it previously, or never loaded properly within an app. From a UX ...
1
vote
1answer
260 views

Is Slack's Multi Login Design Good for UX?

From a user experience standpoint, does it hurt that a user that is part of multiple teams on Slack, is required to log in to each of them individually, and to type in each team's url/name ...
0
votes
1answer
75 views

'Username or email' label on the log in page, for people who can only use 'assigned' username?

I've reviewed discussions on username vs email for login form but couldn't find any reference to a similar case. The website I'm working on has large number of existing clients who can only use '...
2
votes
1answer
94 views

Autofill forms - wrong username saved making users think the password is faulty

Is there a way to notify the user that they have saved incorrect credentials? Currently users think their password is at fault and reset is, leading them to receive an email with the correct username ...
2
votes
7answers
283 views

Specific messages for wrong password or wrong mail - which is the correct practice?

I built two different error messages in login flow. One for when users err the mail and another when users err password. The developer whom I'm working with suggests to let just one message to avoid ...