Questions tagged [login]
is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user
45
votes
3answers
8k views
What's the point of deactivating Num Lock on login screens? [closed]
Many login screens automatically deactivate the Num Lock key on the keyboard before the user can enter their password. This is extremely frustrating for the user as they involuntarily type their ...
49
votes
8answers
12k views
Is there a problem with hiding “forgot password” until it's needed?
To be honest, I don't really see any use for the "forgot password" button/link unless the user put in a wrong password before. In my current project, we need as much space as possible and I was ...
0
votes
1answer
94 views
How to simplify login and registration when you can't use social login?
What is a good alternative to the traditional registration and logging in methods, other than social log in? I have a project that I'm building that I cannot employ the use of social logins-in.
I ...
0
votes
2answers
51 views
Website main action requires Sign Up: sign-up first vs sign-up on submit?
I am building a website in which we rely on the community to build contribute to publically available resources.
The main call to actions on our landing page will be browse and contribute.
The ...
5
votes
3answers
299 views
Why do many companies hide their navigation during the Sign-In and/or Sign-Up flow?
I have been tasked with designing a sign in flow, but I have noticed that many companies hide their site navigation during their sign in/sign on flows. I've seen quite a few articles on designing ...
1
vote
1answer
103 views
How is a two-step login better than single-step when you have a password manager?
I am using a browser-based password manager. For most websites the login workflow is:
Go to login page. Both username and password field are visible.
Credentials are auto-filled by password manager. ...
2
votes
1answer
49 views
Example workflow when changing a site's identify provider
I'm switching a site from ADFS/AD to Azure B2C/AAD and require users to reset their password. Users will also see different log in screens. I'm struggling to find an approach where users won't be ...
1
vote
1answer
113 views
Users asking to reset password in account registration
Ive been pouring through responses in a customer satisfaction survey we put in our account registration and I've noticed a few responses that surprise me. Several people have gone to account ...
1
vote
2answers
74 views
Should users be shown a login page or the same page they were in after their session timer expires?
Currently I am designing a security product for which the session timer is 15 mins after you will be logged out. Should I
a) Show the user a small modal which says they have been logged out
b) Show ...
0
votes
2answers
79 views
After login users must accept new conditions
I am wondering which action should I use when customer change terms of usage and conditions.
Flow is:
User login
New conditions appear
User to get access to portal must accept conditions
If user ...
0
votes
2answers
171 views
User friendly transition between signup page and login page
I work on a website where users:
fill in a registration form (with only 2 fields: password & confirm password; each user have a unique token which is stored in the URL)
then land directly after ...
3
votes
2answers
107 views
Asking user to login in the middle of a purchase in a website used years ago
If a visitor tries to make a purchase on an website from which they made a purchase maybe a few years ago, during checkout it might happen that the user does not remember he has an account and as I ...
5
votes
2answers
220 views
Perceived security of magic link/passwordless login
As far as I've read, passwordless login like Slack uses (user inputs their email and then clicks on the login link in their email) is becoming more common and is just as secure as logins that require ...
0
votes
1answer
124 views
Phone number login and verification for mobile apps
Can someone shed some light on the security behind mobile phone logins on mobile apps?
Uber and Lyft ask the user to login using their mobile phone, I'm assuming because it is a more unique ...
2
votes
2answers
113 views
How long do you keep your customers logged in? (sessions and authentication)
I was curious how long do you think we should keep users logged in before they're required to sign in with username and password again?
I was wondering if there's any resources or studies done to ...
1
vote
1answer
50 views
How to inform the user they have been logged out from their previous account when logging in to a new account in a new tab
We have multiple products that belong together, a suite of products. They all share a single-sign-on solution ie users can log in to one of the products and are automatically logged in to all of the ...
1
vote
2answers
82 views
Social Login - Icon only or Icon with Text?
There is a Post here but the answer doesn't fit because everyone knows the Social Login Logos.
OK, so right now I implemented the Social Logins into my Website and I am curious if the User ...
0
votes
2answers
69 views
How to prompt existing customers to change their email
I'm looking for some UX examples to how other companies have handled this situation:
Scenario:
Devs are using an old password encrypting method (sha1) I believe and need to change it to a more secure ...
-1
votes
1answer
72 views
Error message in login
In the login page of my software, there are 3 input fields - organization, username, and password.
There isn't an option to register, but the registration is done by the organization manager.
...
3
votes
1answer
100 views
How to manage logged in status when the user clicks back button?
Something I have had trouble understanding the technical/implementation requirements is what should happen to a user's logged in state when they press the back button immediately after logging in (or ...
1
vote
1answer
41 views
What is the general approach on Login/Register Forms Presentation
So I am not sure which option is better for the User, to have a Modal Open when the User clicks on a Login/Register Button on the Navbar or if an external Page is the better approach?
Because often ...
3
votes
1answer
115 views
Login form: User ID and Password in same page vs User ID in the first page and password in the next [duplicate]
Some major sites like Google and Amazon take 2-page approach for signin. They first ask for ID and in the next page ask for password.
What is the advantage in this against single page signin process?
...
1
vote
2answers
118 views
Why do we put login (with social media) buttons on the bottoms of login forms?
Like this: https://dribbble.com/shots/4414790-Modal-login-screen-Sketch-freebie
I never see them on top.
Is there a reason?
1
vote
1answer
125 views
Fullname vs username and how to ask for username after Social Login
I am building a mobile application where users can post/rate songs they like.
I have three ways of registering: email+password, facebook login and google login.
From my personal experience, some ...
0
votes
1answer
153 views
What is the optimal time for a user on Login Page?
Google Analytics shows that my users need 30 seconds on average to complete the login, while a lot of password resets happen.
What is the optimal timeframe a user should spent on the login page?
Is ...
1
vote
2answers
176 views
Sign-up and Log-in for two different sets of users
TL;DR / PROBLEM SUMMARY
Business users should only sign up and login with the email/password option using their work email address. They cannot login with social login options.
Personal users can ...
1
vote
1answer
211 views
Reasons for seemingly inefficient design of Evernote login process
Evernote's login form works like this:
When you go to their website, there is no login form. There only is a form for registering. If you enter your login credentials into that form, it won't log you ...
0
votes
2answers
243 views
Are there any design guidelines to Sign in with SSO (Single Sign On)? [closed]
Should Sign in with SSO be a button? Or should it be a link? If a button, should it be in red color, or black, or blue, etc?
Check the link "Login with SSO" in this example: https://trello.com/login
1
vote
2answers
72 views
What should be the flow if user used social log-in at first then tried to login via email after?
Let's say the user signs-up via Facebook. However, some time passed and the user forgot that they signed-in via Facebook and tried to log-in using their email.
Usually, for other apps, the login just ...
6
votes
4answers
5k views
What are the differences between “Remember me” and “Stay signed in” functionality?
For my understanding:
"Remember me"
We store password and username without login.
User clicks the login button and is logged in.
"Stay Signed in"
We store password and username with login.
...
1
vote
1answer
57 views
Force full registration now or only when needed?
I'm creating an app where most users will only use it temporarily, like guests at an event. For this reason I used Firebase Anonymous Login, to where they just supply a name and they're ready to go ...
0
votes
2answers
67 views
Mobile log-in: how to divide two types of user logins and two methods of logging in?
So I'm designing a modile/table log in page. There are two types of users who can log in because the functionalities of the application depend on what type of user they are. Employees and managers.
...
4
votes
1answer
52 views
Web Application best practice: ephemeral session or expiring sessions?
While working on an application using Node.js and Express, I was finding an interesting and perplexing issue in my UX testing. The application had session settings for "maxAge: 24 hours" and "...
0
votes
1answer
50 views
What is the disadvantage of automatically determine for the user whether it is a sign-in or a sign-up based on whether email exist?
There is question Is it good to automatically sign up a user if he doesnt have an account?, but they focus on OAuth signin. They answer it is better because there is less friction, more convenient. ...
0
votes
1answer
128 views
Is NOT being a social network a benefit? [closed]
I'm working on a new website project that requires users to log in to access the content, and once logged in they can publish, share and follow content.
Since logging in is a required action to gain ...
1
vote
0answers
90 views
When to ask for login?
I currently own an online store for video games and I use the Stripe API. This is the current order of events: Add to cart > Checkout > Enter Card Info > Charge > Download Item, although to battle ...
1
vote
1answer
82 views
When user check the “Keep me signed in” on login page of the website, Should we also mention the duration?
Should we do this?
or this is enough
0
votes
1answer
101 views
Are there any science based studies on separating username and password in two screens?
I was trying a similar approach to google which login in 1 page and password in the second but a coworker said that for accessibility reasons password and login should be in one screen. Is there any ...
0
votes
1answer
44 views
When to log in the user during shopping process?
I need to make sure the users are logged in (and thus registered) before they can purchase a product in a game-related platform that I am working on.
My question is if there's the best moment for ...
0
votes
1answer
67 views
Using only phone number and 2-step verification as login
Is requiring the user to login using phone number and 2-step verification bad design? I have only seen 2-step verification as an EXTRA layer of protection, not a requirement. The only thing similar is ...
0
votes
1answer
81 views
Does a basic login form need to state required fields to pass accessibility?
One of the accessibility criteria is "3.3.2 Labels or Instructions" and one of the ways to meet that criterion is by identifying required fields.
https://www.w3.org/TR/WCAG20-TECHS/H90
Is a website ...
0
votes
1answer
105 views
Flow for alternate (to SMS) security verification
For our 2FA (2nd Factor Authentication) process, we default to having an SMS sent to the user's phone.
This is causing issues for users who can't receive SMS messages; eg, they're overseas.
The ...
3
votes
4answers
215 views
How to prevent from creating an obsolete account for a returning user
There is an application that for many users is a daily driver but just for a short period of time. Then they would probably uninstall it or change their phone before they need to use it again, and ...
0
votes
5answers
89 views
How to represent a non-mandatory option on a login screen
Does the below login form convey that users can log into a default product or that they can specify it manually?
Username and password field have placeholders and no default values. However, the ...
4
votes
2answers
251 views
Showing avatar on login
When the user enters a valid email on the login like Google did some time ago, is there any problem to show the avatar?
Does make the experience better?
Is a there is any security risk?
3
votes
1answer
391 views
Do we still need a Remember Me button on websites? Or can we rely on modern browsers to handle this?
I recently had a discussion at work about whether to include a "Remember Me" option on our website. Altough I was initially in favour of the idea, I later realised that most browsers already provide ...
1
vote
2answers
102 views
What does a federated or federation sign on mean for the UI?
A product manager recently explained that we want to start looking into a federated sign in to work more nicely with our partners. He suggested a two-step sign in approach (like google accounts) where ...
0
votes
1answer
78 views
2
votes
3answers
110 views
Is it a best practice to put a login form in the website's footer?
I am really wondering if it a best practice to put a login form in the website's footer? There's a login link in the menu bar so I am not really sure if its still needed.
0
votes
1answer
62 views
Should the password field be cleared if there's a connection error?
I have a desktop application which has 3 fields for logging in: Username, Password, and Server URL.
After reading similar questions, I've decided that my application will reset the password field if ...
