Questions tagged [login]
is the process by which individual access to a computer system is controlled by identification of the user using credentials provided by the user
607
questions
5
votes
2
answers
7k
views
In a Single Page Application should the page reload on login/logout?
I am building an application and I'm using the SPA (Single Page Application) approach. This means my page never reloads and everything is done through AJAX or sockets. However, I do have one exception:...
- 1,013
2
votes
1
answer
690
views
How to reset a user's password before email verification?
I'm designing a basic registration and login system.
The site sends a confirmation email on registration with a 6-digit OTP.
Of course, it is possible that a user does not complete this email ...
CommunityBot
- 1
1
vote
2
answers
156
views
Better solution for register/login
when you are on a site or a blog do you prefer register/login using a classic form with first name, last name, email etc or do you prefer register/login using something like google, facebook, twitter ...
- 36
5
votes
2
answers
8k
views
What is the reason for having more than one login link for Facebook?
If you do a Google search for facebook you'll see something that I think is rather curious, basically there are two different links, one to log into your account and the other to login to your account....
9
votes
4
answers
7k
views
How many incorrect attempts should be allowed before invalidating a password?
I am trying to prevent brute force attacks on a user's account by invalidating a password when too many attempts are made in the same minute, hour, day or something similar. The credentials in this ...
- 19.5k
16
votes
2
answers
13k
views
How to display a "Log in" error in Material Design?
Problem
I am trying to create a log in page that follows the material design guidelines, but I don't know how to handle when the user inputs the wrong email or password.
In the material design ...
- 132
0
votes
2
answers
131
views
Is there a reason to ask for password only after typing login? [duplicate]
I saw that there is a recent trend in splitting the sign-in step into two: login followed by password (rather than in a single stage). That is, the flow is: [type username] -> [confirm] -> [type ...
- 111
2
votes
3
answers
3k
views
Can we use "Continue with Email" instead of signup/login?
I was working on a product and while making the signup/login buttons I thought of providing the Continue with email/social instead of login and signup buttons separately.
Will it affect the cognitive ...
- 101
1
vote
2
answers
124
views
Is it ok to inform the user about an active SSO connection in Login?
For log in security, I know that you don’t want to identify whether or not it is specifically the username or password that is incorrect.
e.g. “The email or password you entered is incorrect”
Along ...
CommunityBot
- 1
1
vote
0
answers
327
views
Best practices for mobile app registration and login [closed]
I'm developing a consumer mobile app and was planning to have these options in the registration:
Mobile number or email
Password
Or, use one-time passcode [instead of password]
Continue with Facebook
...
- 11
14
votes
6
answers
11k
views
Correct length for login timeout?
My company has created lots of computer software but one issue we have is with login timeouts.
Some developers want to make them shorter for security, while most users want it be infinite? Is there ...
- 299
0
votes
0
answers
393
views
What is the best practice to invite user to access the web application?
Currently, I am planning a web app that will be something like Google Forms, though with a different model. I'd really appreciate any opinions you have regarding better UX and a more sensible approach....
9
votes
5
answers
5k
views
Why separate login and signup page?
I was wondering why basically all webpages use separate login and signup pages. Not necessarily separate html files, but they are usually built as two separate forms.
Why not have one form with email ...
- 258
2
votes
1
answer
512
views
Are password strength meters useful?
What are your thoughts on password meters?
I think they are only somewhat helpful because there is no clear indication as to how to actually strengthen the password. A novice user could maybe type in ...
JonW♦
- 37.2k
1
vote
1
answer
427
views
A question regarding registration form, social login and checkboxes
I am a frontend/backend developer. Recently I was provided a design from our UX dev for a registration form for a website. It looks something like this:
------------------------------------|
[ Login ...
- 2,443
0
votes
2
answers
254
views
2FA into the login page (without email or phone number)
I have a question regarding UX of the 2nd factor authentication (2FA) process.
It is common in the authentication process to ask for user id (commonly email) + password, and in a second step ask for ...
- 111
6
votes
3
answers
3k
views
How many people use Google or Facebook to sign up to other apps
I notice that a vast majority of apps nowadays prioritise login with Facebook, Google, or other platforms for Sign Up. Usually you see a button with Facebook, one with Google, and the last option is ...
- 177
2
votes
0
answers
167
views
What are usability implications of using magic link/password-less only login for older users?
The audience of the product tends to be older (50+) so it is very likely that it would be their first time using an app that is password-less login only. We fear this might be confusing for this user ...
- 121
0
votes
0
answers
205
views
Is it okay to combine Log-in and Sign-up for passwordless/magic-link logins?
The generally received wisdom online seems to be to keep your log-in and sign-up/register flows separate. The reason being, that they are very similar and it is easy for users to get confused.
I plan ...
- 101
7
votes
3
answers
3k
views
How to let the user update their email if they used a social login?
I have a basic user account system through which a user changes their profile picture, username, email and password.
If the user used social login to sign up, they wouldn't have a password in my app.
...
- 336
1
vote
1
answer
3k
views
Phone number login and verification for mobile apps
Can someone shed some light on the security behind mobile phone logins on mobile apps?
Uber and Lyft ask the user to login using their mobile phone, I'm assuming because it is a more unique ...
2
votes
0
answers
66
views
Company internal tool with SSO auth [closed]
I am developing on a web project for the company I work for that uses SSO to login. You can't use the tool if you don't log in. The app will be available to everybody(dose not require company VPN or ...
- 12k
12
votes
6
answers
4k
views
Login button - on homepage or separate page?
I ran across an article called Put the login on the front page, where the author wants sites to:
[...]put the user name and password
box somewhere obvious on the home page
like the upper right ...
- 101
0
votes
1
answer
2k
views
Which facebook design should you use for facebook login?
Recently facebook changed its products design and changed to a new logo. According to their brand resource center you should use their new logo and color. But their facebook for developers still uses ...
3
votes
2
answers
199
views
Should I verify a user's password before showing them that they are banned or just check the email?
If I ban a user from a website indefinitely (specific manual ban not automatic), and they'll never be able to appeal, should I verify the user's email and password, or show them that they're banned ...
CommunityBot
- 1
7
votes
8
answers
3k
views
Specific messages for wrong password or wrong mail - which is the correct practice?
I built two different error messages in login flow.
One for when users err the mail and another when users err password.
The developer whom I'm working with suggests to let just one message to avoid ...
0
votes
1
answer
186
views
Repeat password field necessary in a signup page? [duplicate]
Possible Duplicate: Why should we ask the password twice during registration? When designing a new and simplified signup page I got into an argument with a colleague about the necessity of the "...
- 317
0
votes
1
answer
125
views
If you need to enter your skype name to link your account
I'm working on a website which can be connected with Skype and the user has some benefit from it. In case if you need to enter your Skype name to link your account, and then click on your name - after ...
CommunityBot
- 1
1
vote
1
answer
157
views
Logging in with Google, Facebook etc but using the same account
Let's say a user logs in to a site with their Facebook account, then later decides to log in with their Google account. Should a separate account be created for each method of login or should the user ...
- 596
3
votes
2
answers
243
views
Should a user attempting to enter an expired 2FA Token be notified that it is expired or just say that it is invalid?
If a user attempts to login using 2FA, and they get sent an email, there are a couple of scenarios that may occur:
Code is valid and not expired: log user in.
Code is valid but expired.
Code is ...
- 2,233
6
votes
2
answers
2k
views
How is a two-step login better than single-step when you have a password manager?
I am using a browser-based password manager. For most websites the login workflow is:
Go to login page. Both username and password field are visible.
Credentials are auto-filled by password manager. ...
1
vote
1
answer
69
views
Quantifying the impact of offering alternative signup/login methods?
Nowadays it's common for websites to offer signup/signin methods that don't require making an account (email/password) for that specific site, for example 'Login with x':
Facebook
Google
Twitter
...
5
votes
3
answers
7k
views
Can I combine login and signup with a single button?
I am building a login page and I spent over 5-6 hours reading a tonne of posts in this group. I saw the following discussions
Login and Register as separate pages
Login Modals
Login Register vs Sign ...
0
votes
2
answers
633
views
SSO Login, can we remove the Linkedin color in the button? [duplicate]
I've been working on a login flow where we are allowing users to sign up or login with Linkedin. The devs in my team told me that we need to keep the Linkedin button with the colors :
However, we ...
- 1,344
0
votes
1
answer
233
views
SSO Login, can we remove the Facebook color in the button?
I've been working on a login flow where we are allowing users to sign up or login with Facebook. The devs in my team told me that we need to keep the Facebook button with the colors :
However, we ...
- 6,641
11
votes
3
answers
18k
views
Reset password, appropriate response if email doesn't exist?
It is common on login forms to see "Email or password is incorrect" when the user types in their account details incorrectly instead of just "password is incorrect". This is, for among other reasons, ...
- 26.7k
1
vote
2
answers
317
views
Why do so many login webpages seperate email and password fields? [duplicate]
I've been noticing that many popular login pages separate email and password fields on separate "sections" or pages.
Is there a UX benefit or reason for this that I'm not aware of?
- 69
2
votes
1
answer
273
views
Should users be given a way to link a password after social auth?
Obviously it is very common for sites to allow log in using both the traditional email/password as well as social authentication using Facebook, Google, Twitter etc.
If a user creates an account using ...
CommunityBot
- 1
0
votes
2
answers
140
views
Changing login method from email/social to One-time password
There are existing users who login with their email or social accounts. How will existing users login if we get rid of social and email login?
CommunityBot
- 1
18
votes
4
answers
7k
views
Which is the better UX for a user to see their password at the login screen?
These are the two options I'm considering.
Having a tickbox for a 'show password' option, which would let the user see their password. A 'caps lock' icon would be in the password text area which ...
- 1
18
votes
5
answers
6k
views
Pros and Cons for having same form for login, register and forgotten password
I have notice some sites have the same form for login, register and forgotten password.
Below the form you have 3 buttons
i forgot my password
register
log me in
What are the pros and cons on ...
- 21
1
vote
1
answer
369
views
Asking user to login to another website from within my app
I am working on an app which requires me to interact with an external API from an external website on behalf of the user. For this I need to ask them for their credentials for this other API. Will ...
- 5,578
0
votes
1
answer
50
views
How to show different educational institutions' login options in an app?
I'm working on a mobile application where users, apart from being able to login and sign up with accounts made directly on the app, have the ability to login directly with their educational ...
- 391
1
vote
1
answer
253
views
User signs up using their Facebook account logs and then logs in with their (same email) Google account. Now what?
Our web app (a personal calendar-management tool) offers both Facebook and Google as social login providers. Sometimes a user who originally signed up using a Facebook account tries to log in using ...
- 31
0
votes
1
answer
102
views
Forcing Sign-Up For a Mobile App
Currently in the process of desgining a mobile app in the 'mental wellness' space. Features include;
Journalling (w/geotagging)
Mood tracking
Affirmations recording
To Do
Goal setting/tracking
My ...
- 108
4
votes
5
answers
297
views
Security issues if not forcing a user to sign up
I've built a simple web app Flask.io that enables users to create and share to-do lists.
It doesn't require sign up. This is an important differentiator. I don't want to force the user to register ...
- 3,310
9
votes
4
answers
9k
views
What to call a page that covers the Sign In / Sign Up aspect of user accounts?
I would like to make a page that covers creating a user account / signing into a user account.
I have researched this before and found out that sign in / out / up is generally a better term to use ...
- 141
2
votes
3
answers
3k
views
How to prompt existing customers to change their passwords
I'm looking for some UX examples of how other companies have handled this situation:
Scenario:
Devs are using an old password encrypting method (sha1) I believe and need to change it to a more secure ...
4
votes
1
answer
192
views
Common input boxes to register and login with separate buttons
While working on the registration/login page for my mobile app, I came up with the idea of combining the two into one. On clicking register, users will be taken to a new page to fill rest of the ...
- 3,426
50
votes
8
answers
13k
views
Is there a problem with hiding "forgot password" until it's needed?
To be honest, I don't really see any use for the "forgot password" button/link unless the user put in a wrong password before. In my current project, we need as much space as possible and I was ...
- 6,799