Questions tagged [login]

is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user

Filter by
Sorted by
Tagged with
156 votes
16 answers
49k views

Why should we ask the password twice during registration?

It would be easier to ask for a user's password only once during registration. The problem: The user could make a mistake while typing the password once because of hiding letters. The solution: The ...
webvitaly's user avatar
  • 3,912
18 votes
5 answers
2k views

Would it be bad design (and unsafe) to put password guidelines next to a login box?

Different websites have different password requirements Some are content with a combination of just lower case words Some require a combination of lower case and upper case words Some require ...
Mervin's user avatar
  • 44k
24 votes
5 answers
5k views

email field or username for logging in an application?

What is the best solution for an app : Email or username field? I like email because: it's unique user will easily remember it's personal (which can be a disadvantage sometimes; Multiple users on ...
Marc D's user avatar
  • 742
25 votes
5 answers
7k views

Best way to combine sign in and sign up in the same form?

I want both forms to be extremely simple - sign in much like facebook in the header with 3 inputs side by side - email, password then "sign in" (or is "log in" better?). I also want to USE THE SAME ...
Colbern Rae's user avatar
18 votes
5 answers
6k views

Pros and Cons for having same form for login, register and forgotten password

I have notice some sites have the same form for login, register and forgotten password. Below the form you have 3 buttons i forgot my password register log me in What are the pros and cons on ...
Gabriel Solomon's user avatar
64 votes
21 answers
14k views

Argument for/against splitting login process into checking username, then ask password?

My boss has insisted for a while that our login process be divided into two steps on separate pages: on the first page, ask the user's e-mail address. On the second page, either display "user found" ...
Michael's user avatar
  • 741
11 votes
3 answers
597 views

Defaulting to the sign-up form?

Recently I've noticed more and more sign-in / sign-up workflows defaulting to the sign-up option first and providing a minimal "Sign-In / Login" action somewhere else on the page. What's the reason ...
Hynes's user avatar
  • 7,995
6 votes
2 answers
6k views

Facebook connect vs existing account - How to link those two?

Since we have introduced FB connect to our web page, we have noticed that users became confused a lot and a significant number of users began to have multiple accounts. After they log in somehow (via ...
Bedi E's user avatar
  • 181
36 votes
9 answers
18k views

Why isn't the "remember me" checkbox in login forms enabled by default?

On the majority of sites, a "remember me" checkbox on login forms is not selected by default. Most users would like to stay logged in after login. It annoys users each time to have to enter username ...
webvitaly's user avatar
  • 3,912
29 votes
5 answers
20k views

Do we really need a "Remember me" option on a Login page?

I'm wondering why do we need to ask user to make a decision, for how long he want to be authenticated? This is done by having "keep me signed in" option login page: Why can't we simply "predict" how ...
Paul Podlipensky's user avatar
17 votes
4 answers
44k views

Which label text is good for "Enter email address"?

I'm about to place one text field in the log in area where user can enter email address and password for logging in, but I'm confused which text should I use for label and placeholder text? Here are ...
Shivam Pandya's user avatar
14 votes
6 answers
11k views

Correct length for login timeout?

My company has created lots of computer software but one issue we have is with login timeouts. Some developers want to make them shorter for security, while most users want it be infinite? Is there ...
Musaab's user avatar
  • 423
12 votes
4 answers
5k views

Social Login adoption vs Traditional Login

I have implemented janrain's social login on my website. I am wondering how important it is to include a traditional login (email/password) system. I believe there may be a significant percentage of ...
user avatar
11 votes
2 answers
2k views

How do you prevent users from getting confused with multiple login options?

I came across this question in a closed LinkedIn group. I think it's a great one and since it's hidden from search engines, I decided to bring it to the outside world. Some users don't visit your ...
dnbrv's user avatar
  • 13.2k
10 votes
6 answers
1k views

Is it OK to require users to have a third party login account?

For a web app I'm developing I was dreading having to Require users to create yet another account / password to keep in mind. Handle retrieval of lost passwords etc. What many sites (like this one ...
Theodor's user avatar
  • 219
9 votes
4 answers
3k views

Why are login forms centered?

Why are login forms always centered on the screen? Most horizontally, some vertically also. Sites like Apple/Amazon/Adobe/Microsoft/Google/PayPal/Instagram/Twitter etc. are all centered! Is this an ...
bfritz's user avatar
  • 1,485
7 votes
4 answers
760 views

Social network login or not?

I am developing a niche social networking iPhone app of my own. I was wondering if it would be best to allow the user to connect to social networks such as Facebook and Twitter to login to my app (...
Jacques Blom's user avatar
6 votes
2 answers
2k views

How is a two-step login better than single-step when you have a password manager?

I am using a browser-based password manager. For most websites the login workflow is: Go to login page. Both username and password field are visible. Credentials are auto-filled by password manager. ...
lofidevops's user avatar
6 votes
10 answers
6k views

Is there any advantage of signup before login with social plugins?

I am building a site and was thinking about if there should be a signup option at all. I found the question about the difference between sign up and log in with Facebook/Google/etc but there was ...
nxshar2's user avatar
  • 113
4 votes
6 answers
7k views

Should the user be forced to sign in for a wish list on an ecommerce site?

I believe that signing into a site can be a big barrier to users so prefere e-commerce sites that offer guest access. The question is should wishlists be a guest feature or do the business advantages ...
Stewart Dean's user avatar
  • 2,463
3 votes
3 answers
666 views

Should a login page have links that send you away from the form?

I'm designing a login form and wondering if the header and footer on the page get in the way of logging in. Maybe I'm being too fussy, but wondering if removing the primary navigation links from the ...
user34318's user avatar
0 votes
1 answer
247 views

SSO Login, can we remove the Facebook color in the button?

I've been working on a login flow where we are allowing users to sign up or login with Facebook. The devs in my team told me that we need to keep the Facebook button with the colors : However, we ...
Tpaz0's user avatar
  • 3
104 votes
13 answers
17k views

Should passwords expire?

I have a dispute with my partner. He comes from a financial software background but I do not. He recommends that our web app should expire user's passwords after 6 months (and it has to be unique each ...
jrjensen's user avatar
  • 951
104 votes
2 answers
70k views

When to use "join," "register," or "sign up"?

For a user, when is it better to be asked to do the following: "Sign In" vs. "Log in" "Join" vs. "Register" vs. "Sign Up" "Sign Out" vs. "Log out" Different websites seem to use them differently, ...
johnnietheblack's user avatar
79 votes
12 answers
16k views

Are people sick of logins?

If you have a website where users 90% of time only read and view content, but rarely post, like a blog, does it make sense to force a login? If I force the user to login to view some information, ...
Luka's user avatar
  • 915
58 votes
11 answers
7k views

Does it make sense to authenticate a user when he/she provides existing valid credentials while registering?

Someone came up with this proposed behavior recently and I haven't been able to find examples of services working the same way. I have to say I don't really like it, but can't put my finger on a ...
raul2010's user avatar
  • 681
50 votes
8 answers
13k views

Is there a problem with hiding "forgot password" until it's needed?

To be honest, I don't really see any use for the "forgot password" button/link unless the user put in a wrong password before. In my current project, we need as much space as possible and I was ...
hans wrust's user avatar
45 votes
10 answers
8k views

Is it OK to autocorrect users when they have mistyped parts of their email address?

When logging in, users might mistype parts of their email address. For example, [email protected] instead of .com, Yaho instead of yahoo, etc. The main rationale is that by autocorrecting user input ...
Okavango's user avatar
  • 7,026
35 votes
9 answers
9k views

Banned user tries to log in − show a “Banned” message or a generic “Cannot log you in”?

From a Ux standpoint, what is the best practice around messaging when a banned user/customer/member attempts to log in? I'm asking for a forum project I am working on, but also looking for guidance ...
GWR's user avatar
  • 1,479
22 votes
5 answers
11k views

Login/sign-up in modal dialogs

I've been working on a web-platform for some time now. As I was writing the usual "Sign-up" and "Login" pages I realized that a whole page was an overkill for such simple tasks so I decided to put ...
thwd's user avatar
  • 523
20 votes
5 answers
3k views

Whats more user friendly local authentication or remote authentication (OpenID, OAuth)

From a usability perspective only (not security), what do users find more comfortable? A site with its own login page (need to sign up but then easier to login; or a site with remote authentication (...
Sruly's user avatar
  • 3,552
18 votes
6 answers
9k views

Why is the common practice of sign in error message always mix the wrong username/password cases together?

Example: When I try to sign in a service with a Username / Password combination, the error message always returns as "Username or password is invalid." But the actual case is that I input a wrong ...
0065paula's user avatar
  • 181
16 votes
2 answers
14k views

How to display a "Log in" error in Material Design?

Problem I am trying to create a log in page that follows the material design guidelines, but I don't know how to handle when the user inputs the wrong email or password. In the material design ...
Sebastian S's user avatar
13 votes
4 answers
1k views

When a user's login email has been changed, what should happen?

I'm making an online frontend for a system. This system is normally used by a business providing a service to a customer. The customer will have the option of using this online frontend in addition to ...
James's user avatar
  • 231
12 votes
2 answers
797 views

Dealing with Connected Social Accounts and Potential Orphans

Our application has the following signup paths: Twitter Connect Facebook Connect Email/Password Once you signup with one, you have the option to connect either both social account (in the case of an ...
roomnoise's user avatar
  • 121
12 votes
3 answers
19k views

Reset password, appropriate response if email doesn't exist?

It is common on login forms to see "Email or password is incorrect" when the user types in their account details incorrectly instead of just "password is incorrect". This is, for among other reasons, ...
DasBeasto's user avatar
  • 15.3k
12 votes
6 answers
4k views

Login button - on homepage or separate page?

I ran across an article called Put the login on the front page, where the author wants sites to: [...]put the user name and password box somewhere obvious on the home page like the upper right ...
John C's user avatar
  • 324
11 votes
5 answers
3k views

When to ask for registration

I'm designing an iOS app to order groceries online. I have a doubt about when ask for registration. To proceed at payment you must be a registered user. One can use an app like this several times and ...
Matteo Vacca's user avatar
10 votes
4 answers
710 views

Redirect automatically to login or explanatory page?

In terms of user experience, and I suspect that this might have SEO considerations too.. BUT.. If I have a variety of pages on my website which require the user to be logged in.. for example a '...
Thomas Clowes's user avatar
9 votes
4 answers
8k views

How many incorrect attempts should be allowed before invalidating a password?

I am trying to prevent brute force attacks on a user's account by invalidating a password when too many attempts are made in the same minute, hour, day or something similar. The credentials in this ...
Alexandre Martins's user avatar
9 votes
5 answers
6k views

Why separate login and signup page?

I was wondering why basically all webpages use separate login and signup pages. Not necessarily separate html files, but they are usually built as two separate forms. Why not have one form with email ...
Daniel's user avatar
  • 91
9 votes
5 answers
650 views

Does logging in turn away visitors

We are toying with having a user login so we can customise the experience for a specific website. However, I feel this comes at a cost. My feeling is that this turns visitors off straight away as ...
user7615's user avatar
8 votes
7 answers
583 views

How to handle account disabling and enabling

I'm currently building a small online dating service and am wondering what the best task flow is if a user disables their account. (When an account is disabled, all their data is retained but they ...
lori.lee's user avatar
  • 313
7 votes
1 answer
223 views

Is it better to force sign in before or during restricted forms?

I am building a form that will require a person to be signed in to successfully post. Filling out this for is ESSENTIAL to my web application, so I really want to make it as painless as possible - and,...
johnnietheblack's user avatar
7 votes
3 answers
174 views

Accessing secure content

Which of the permutations for accessing secure content do folks prefer? In this instance I'm referring to a saved quote and have usernames, email addresses and quote reference numbers available. E.g:...
user avatar
7 votes
2 answers
6k views

What is the name of the button that lead to a login and register page (one page)?

I have a page that serve both login and register. I put the two form side by side (login form to the left, register form to the right). In menu header, there would normally be button that lead to ...
tiengtinh's user avatar
  • 589
7 votes
1 answer
9k views

Having the register and login options on same page - Best practices

Sorry for the making this a lengthy question, but I needed to make all info available. So I'm trying to design the home page of a web application. The home page will have the following elements ...
TDsouza's user avatar
  • 628
7 votes
2 answers
2k views

Any stats data advocating integrated social logins over traditional user / password login? [duplicate]

Is there any published, statistical data that shows social logins (such as OpenID, Facebook, etc.) are preferable over traditional username / password login with regards to registration rates? For ...
datasn.io's user avatar
  • 217
6 votes
2 answers
336 views

When should the message informing the user that the password they entered is wrong go away?

This is a follow up to this question since it got closed. In a log in form, after the user enters the wrong password, when should the message saying "wrong password or user name" go away? For example ...
Celeritas's user avatar
  • 1,365
6 votes
2 answers
2k views

Best way to register and login within the same form

I have an app in which users add items to a database that is synced across all devices. I need users to login in order to attach an author to each item and to record how many "points" each user has ...
Devon M's user avatar
  • 163