Questions tagged [login]

is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user

Filter by
Sorted by
Tagged with
1 vote
1 answer
15 views

If a user is logged out as a result of timing-out, should they return to the homepage or the last page visited

We have a somewhat complex B2B app. If a user is idle for some time, they are auto-logged out and brought to the login screen. If they log back in, would the ideal behavior be to bring them to the ...
0 votes
1 answer
21 views

Does a plus sign indicate to login to access associated price

The aim is to get the customer to login. So we are providing a different pricing model when signed in, does a plus sign indicate to the customer to tap this (a pop up to login will appear) and then ...
0 votes
3 answers
90 views

Pros and Cons of addressing users by their name in Login header links

What are the pros and cons of header Login links with the following message: Login Login, [First Name] I remember reading that addressing users by their first name is overall more friendly and ...
  • 5,106
0 votes
2 answers
39 views

Dropdown in navigation or modal for log in/register?

We've noticed on our website that there's no 'quick access' to users accounts, or to know if they are logged in or not. So I've designed: A dropdown from the my account header in the navigation with ...
  • 1
2 votes
1 answer
56 views

Should authenticated users still see the app's public home page

Let's take two examples: GitHub → the public page at github.com is a presentation of GitHub's features. Once a user is logged in, he never sees this home page again: github.com become the user's ...
  • 23
0 votes
0 answers
29 views

How to let existing users buy a subscription without logging-in on the same email-id?

I'm designing the subscription flow for my site and I don't want users to drop off during the checkout process. A common reason for existing users to drop off was due to them forgetting their password ...
0 votes
0 answers
31 views

Delicately combine Material 3 Text-fields and buttons

How do I get a "pure" Material 3 login screen to look good. What I don't think looks good is the height on the Text-fields and buttons are not the same, and the filled button have more ...
0 votes
3 answers
216 views

Should I keep the user logged in (i.e. "remember me") when they register a new account?

Usually, signup forms don't have a "remember me" checkbox, but at the same time, you're logged in automatically after signing up so you don't use the login form (which has a remember me ...
1 vote
3 answers
78 views

Two data types in one login field

I have a couple of ways of logging into a specific service: either by ID number or email address. The designs so far have been built on the assumption these will be two separate fields, but how might ...
  • 111
0 votes
3 answers
124 views

Using a dropdown split button for 'Log In'

Something isn't sitting right but I can't tell what it is. I've not seen this pattern before. Can you spot the UX/UI deficiencies in this proposed pattern? Or are you fine with it? This is found on ...
1 vote
2 answers
41 views

What to show after being rerouted to application from reset password email, but I've logged in

Consider the scenario: I am on the login screen and forget my password. I go to the "forgot password" screen, which asks for my email. I fill it out, and I am sent a 2FA email. Path 1 - &...
0 votes
1 answer
14 views

Should I share session across tab when user uncheck Remember me

Currently, my website always remembers login i.e. there's no Remember me checkbox. I was requested to implement the checkbox. I have 2 options about the behavior when the user open a new tab of the ...
0 votes
0 answers
25 views

Best way to seamlessly login and/or create a user account with Facebook on a website?

Wondering how to implement the UX for login in this day and age, if I only allow creating an account / logging in with 3rd party services (such as only allowing Facebook or LinkedIn login, just those ...
  • 345
2 votes
1 answer
201 views

Should inline form validation error messages be specific or unspecific on login screens?

I had designed a message reading "Incorrect password" appearing on the 'Password' input field, however, a PM has given me feedback that saying: "I believe the common practice for ...
  • 23
-1 votes
2 answers
61 views

What action should the user take when permission to access a page has been removed?

I'm designing the flow for permission management. In this case, while a user is on a certain screen, their access to that section that screen belongs to is removed. then when the user performs an ...
  • 10.6k
1 vote
3 answers
193 views

Is it OK if normal users can see and access "staff login" page in a website?

My website has 2 types of users: Customers and Staff. I want each type of user to be able to login in a separate page. Is it OK if I show a "staff login" link next to the normal users (...
0 votes
2 answers
95 views

When should I require a user to re-login to their account?

I am building a service for developers and I am wondering when I should "expire" a session. I obviously don't want my users to have to login every time they reload the page but I wouldn't ...
1 vote
1 answer
112 views

Changing the user's email address

We have a dashboard that our users log into using their email and password. We don't currently have the ability to allow them to change their own email address (login). Sometimes, a user may contact ...
  • 1,189
1 vote
2 answers
148 views

Better solution for register/login

when you are on a site or a blog do you prefer register/login using a classic form with first name, last name, email etc or do you prefer register/login using something like google, facebook, twitter ...
  • 263
2 votes
0 answers
308 views

Why did Slack abort magic link? [closed]

In the past, if I forgot my password, either on app or desktop, Slack asked me to provide my email, then it would send a magic link to my email, then I just click on it and logged in. That UX seemed ...
  • 255
0 votes
4 answers
263 views

Should we enforce the user login at app startup?

when we should enforce users to login at mobile app startup and when we can postpone it? What are the best practices for this?
0 votes
2 answers
126 views

Is there a reason to ask for password only after typing login? [duplicate]

I saw that there is a recent trend in splitting the sign-in step into two: login followed by password (rather than in a single stage). That is, the flow is: [type username] -> [confirm] -> [type ...
0 votes
1 answer
552 views

What should happen if a social login user tries to reset their password?

On my webapp, I have normal users who signup with email/password combination I also offer signup via Facebook, Google, Twitter... Let's say you are a social login user who logged in via Facebook on my ...
  • 971
1 vote
0 answers
190 views

Best practices for mobile app registration and login

I'm developing a consumer mobile app and was planning to have these options in the registration: Mobile number or email Password Or, use one-time passcode [instead of password] Continue with Facebook ...
  • 11
2 votes
4 answers
223 views

Should I add sign up after onboarding (customisation) or before?

I am creating UI for a recipe app. I want to include customisation. Asking questions about diet, allergies and time available for preparation. Should I include login/sign up before or after this ...
0 votes
0 answers
331 views

What is the best practice to invite user to access the web application?

Currently, I am planning a web app that will be something like Google Forms, though with a different model. I'd really appreciate any opinions you have regarding better UX and a more sensible approach....
2 votes
1 answer
373 views

Are password strength meters useful?

What are your thoughts on password meters? I think they are only somewhat helpful because there is no clear indication as to how to actually strengthen the password. A novice user could maybe type in ...
  • 1,189
1 vote
1 answer
225 views

A question regarding registration form, social login and checkboxes

I am a frontend/backend developer. Recently I was provided a design from our UX dev for a registration form for a website. It looks something like this: ------------------------------------| [ Login ...
  • 11
0 votes
1 answer
105 views

Using a single email field to navigate to login if account exists or else to sign up

Are there any usability studies on the preference for the following Login/Sign up scenario. On the first page of the mobile application, you will see a field to enter the email address. If the email ...
0 votes
2 answers
222 views

2FA into the login page (without email or phone number)

I have a question regarding UX of the 2nd factor authentication (2FA) process. It is common in the authentication process to ask for user id (commonly email) + password, and in a second step ask for ...
1 vote
0 answers
137 views

What are usability implications of using magic link/password-less only login for older users?

The audience of the product tends to be older (50+) so it is very likely that it would be their first time using an app that is password-less login only. We fear this might be confusing for this user ...
  • 111
0 votes
0 answers
144 views

Is it okay to combine Log-in and Sign-up for passwordless/magic-link logins?

The generally received wisdom online seems to be to keep your log-in and sign-up/register flows separate. The reason being, that they are very similar and it is easy for users to get confused. I plan ...
2 votes
0 answers
59 views

Company internal tool with SSO auth [closed]

I am developing on a web project for the company I work for that uses SSO to login. You can't use the tool if you don't log in. The app will be available to everybody(dose not require company VPN or ...
1 vote
2 answers
110 views

Is it ok to inform the user about an active SSO connection in Login?

For log in security, I know that you don’t want to identify whether or not it is specifically the username or password that is incorrect. e.g. “The email or password you entered is incorrect” Along ...
  • 401
7 votes
3 answers
2k views

How to let the user update their email if they used a social login?

I have a basic user account system through which a user changes their profile picture, username, email and password. If the user used social login to sign up, they wouldn't have a password in my app. ...
  • 971
0 votes
1 answer
1k views

What is better? Login with Phone or Email or Both?

We are developing a mobile app, which our customer requested the following login/registration options. Email, Gmail, Apple, Phone In addition to that, customer want the user to try the app before ...
  • 103
1 vote
1 answer
204 views

How to redirect user to a third-party site?

Context A) https://appname.co This is the main login URL for our product B) https://abcbusiness.appname.co We also sell our product to other business with a different URL. We add the business and ...
  • 613
0 votes
1 answer
148 views

Repeat password field necessary in a signup page? [duplicate]

Possible Duplicate: Why should we ask the password twice during registration? When designing a new and simplified signup page I got into an argument with a colleague about the necessity of the "...
1 vote
1 answer
118 views

Logging in with Google, Facebook etc but using the same account

Let's say a user logs in to a site with their Facebook account, then later decides to log in with their Google account. Should a separate account be created for each method of login or should the user ...
2 votes
2 answers
173 views

Should a user attempting to enter an expired 2FA Token be notified that it is expired or just say that it is invalid?

If a user attempts to login using 2FA, and they get sent an email, there are a couple of scenarios that may occur: Code is valid and not expired: log user in. Code is valid but expired. Code is ...
  • 433
3 votes
2 answers
197 views

Should I verify a user's password before showing them that they are banned or just check the email?

If I ban a user from a website indefinitely (specific manual ban not automatic), and they'll never be able to appeal, should I verify the user's email and password, or show them that they're banned ...
  • 433
1 vote
1 answer
67 views

Quantifying the impact of offering alternative signup/login methods?

Nowadays it's common for websites to offer signup/signin methods that don't require making an account (email/password) for that specific site, for example 'Login with x': Facebook Google Twitter ...
  • 289
2 votes
1 answer
461 views

How to reset a user's password before email verification?

I'm designing a basic registration and login system. The site sends a confirmation email on registration with a 6-digit OTP. Of course, it is possible that a user does not complete this email ...
0 votes
2 answers
432 views

SSO Login, can we remove the Linkedin color in the button? [duplicate]

I've been working on a login flow where we are allowing users to sign up or login with Linkedin. The devs in my team told me that we need to keep the Linkedin button with the colors : However, we ...
  • 9
0 votes
1 answer
144 views

SSO Login, can we remove the Facebook color in the button?

I've been working on a login flow where we are allowing users to sign up or login with Facebook. The devs in my team told me that we need to keep the Facebook button with the colors : However, we ...
  • 3
0 votes
2 answers
225 views

Why do so many login webpages seperate email and password fields? [duplicate]

I've been noticing that many popular login pages separate email and password fields on separate "sections" or pages. Is there a UX benefit or reason for this that I'm not aware of?
  • 103
2 votes
1 answer
150 views

Should users be given a way to link a password after social auth?

Obviously it is very common for sites to allow log in using both the traditional email/password as well as social authentication using Facebook, Google, Twitter etc. If a user creates an account using ...
  • 121
0 votes
2 answers
100 views

Changing login method from email/social to One-time password

There are existing users who login with their email or social accounts. How will existing users login if we get rid of social and email login?
1 vote
1 answer
248 views

Asking user to login to another website from within my app

I am working on an app which requires me to interact with an external API from an external website on behalf of the user. For this I need to ask them for their credentials for this other API. Will ...
0 votes
1 answer
49 views

How to show different educational institutions' login options in an app?

I'm working on a mobile application where users, apart from being able to login and sign up with accounts made directly on the app, have the ability to login directly with their educational ...

1
2 3 4 5
13