Questions tagged [password]

A secret word or string of characters that is used for authentication, to prove identity or gain access to a resource.

Filter by
Sorted by
Tagged with
1 vote
1 answer
43 views

Should inline form validation error messages be specific or unspecific on login screens?

I had designed a message reading "Incorrect password" appearing on the 'Password' input field, however, a PM has given me feedback that saying: "I believe the common practice for ...
user avatar
  • 13
0 votes
1 answer
28 views

Show/Hide Password

Is it possible to have a show/hide password function in a disabled input field? I want the user to be able to see their password so that they don't have to reset the password in their Account Overview ...
user avatar
  • 1
1 vote
1 answer
60 views

Changing the user's email address

We have a dashboard that our users log into using their email and password. We don't currently have the ability to allow them to change their own email address (login). Sometimes, a user may contact ...
user avatar
  • 1,062
2 votes
1 answer
30 views

How to build an events application with private events sharing?

I am building a sport application where people of a city can organize football matches and join other matches as simple users. We have currently built the basics of the application: users can create ...
user avatar
  • 121
0 votes
2 answers
119 views

Is there a reason to ask for password only after typing login? [duplicate]

I saw that there is a recent trend in splitting the sign-in step into two: login followed by password (rather than in a single stage). That is, the flow is: [type username] -> [confirm] -> [type ...
user avatar
2 votes
1 answer
247 views

Are password strength meters useful?

What are your thoughts on password meters? I think they are only somewhat helpful because there is no clear indication as to how to actually strengthen the password. A novice user could maybe type in ...
user avatar
  • 1,062
1 vote
1 answer
82 views

Should i use a single or double page to edit a password?

I was wondering about changing a password in an application. Is it more correct to ask as usual, all three (old, new and confirm) passwords on the same page or is it better to ask for the old password ...
user avatar
1 vote
0 answers
85 views

What are usability implications of using magic link/password-less only login for older users?

The audience of the product tends to be older (50+) so it is very likely that it would be their first time using an app that is password-less login only. We fear this might be confusing for this user ...
user avatar
  • 111
3 votes
2 answers
115 views

How to solve the "Set a password"-step problem in a really user-friendly way?

I'm an advocate of lesser cognitive load process, moreover when this process includes lots of forms and steps. I think we all are at some point. The password step by itself if usually full of pain ...
user avatar
1 vote
4 answers
76 views

creating the correct password parameters for a site, with cc details stored

I am trying to think of the best requirements to set a password for a customer relationship management cloud software service. A credit card is stored on the site, which is only useful to the site ...
user avatar
  • 2,313
1 vote
2 answers
64 views

Where would you look for your password settings?

Organizing app info. Where would you expect to find your password settings - under settings or under profile?
user avatar
2 votes
1 answer
1k views

Best practices for “show password” functionality

In a mobile app context, when the user is presented with a dialog specifically asking for a password, what are the best practices for allowing the user to show the password while entering it into the ...
user avatar
  • 241
0 votes
2 answers
282 views

How to properly represent "leave unchanged"

Users can edit various information, it's all in the same modal (including the password). What would be the best way to represent to the user "leave blank to remain unchanged" (referring to passwords)....
user avatar
  • 105
4 votes
1 answer
149 views

Browsers ruin password UX with dropdown menus. How can I fix it?

FYI the image above was taken with autocomplete="new-password" As you can see, the dropdown is covering the error message (which ends in "letters and numbers" (plus a few other error messages). This ...
user avatar
0 votes
3 answers
173 views

Is it lazy or inconvenient not to distinguish between password reset use cases in the UI?

I was recently asked to reset a password due to the fact that the security requirements for the website had been upgraded, and the users have been asked to change their passwords (for those that don't ...
user avatar
  • 25.3k
5 votes
4 answers
310 views

Passwordless flow: What to do when user enters an invalid email when logging in

I'm planning to make my app passwordless and I've seen sites implement things differently when one puts in an email they haven't actually used for an account on the site before when trying to login. ...
user avatar
  • 151
6 votes
5 answers
1k views

Users aren't allowed to reuse old passwords for security reasons. How to alleviate this pain point?

I work at a healthcare tech start up which is pretty strict about its login guidelines, largely because protecting patient and provider info is such a vital need in this industry. But while our ...
user avatar
  • 533
4 votes
1 answer
228 views

Repeated password entry despite it being visible?

If the signup for a new user account dialog includes an input field to set a custom password which has an option (eye icon) to uncover its current textual contents, should there also be an input field ...
user avatar
  • 2,490
3 votes
4 answers
380 views

Ask users to set a password or pin during the registration process

We are going to give our users the ability to set a password on their apps to protect their personal data such as their transactions, wallet balance and etc. We decided to ask them to set a password, ...
user avatar
  • 51
2 votes
2 answers
753 views

Studies on Password Double Entry per registration

Are there any recent usability / UX and conversion studies how double entry of passwords while registration a user account in ecommerce shops slows down conversion rate? We try to ged rid of entering ...
user avatar
44 votes
3 answers
9k views

What's the point of deactivating Num Lock on login screens? [closed]

Many login screens automatically deactivate the Num Lock key on the keyboard before the user can enter their password. This is extremely frustrating for the user as they involuntarily type their ...
user avatar
  • 541
3 votes
3 answers
162 views

Should you show current state or the state it's about to change to for password visibility? [duplicate]

I'm exploring the idea of adding a hide/show icons for password visibility. I understand we can just use the words "hide" and "show", but if we were to use icons, should its current state be shown ...
user avatar
  • 1,062
50 votes
8 answers
13k views

Is there a problem with hiding "forgot password" until it's needed?

To be honest, I don't really see any use for the "forgot password" button/link unless the user put in a wrong password before. In my current project, we need as much space as possible and I was ...
user avatar
0 votes
3 answers
563 views

How to encourage the user to check details before submission

I'm upgrading a legacy financial application which requires users to re-enter their password before a transaction is submitted. I need to remove the password check since I'm migrating users to a new ...
user avatar
  • 125
2 votes
1 answer
145 views

Should this registration form include field for password now or after user passes review?

The scenario I have may be a type of edge case because of the nature of the site I'm working on. This site (note: the site is not e-commerce, it is not about generating revenue; essentially, non-...
user avatar
  • 1,280
5 votes
2 answers
1k views

How is a two-step login better than single-step when you have a password manager?

I am using a browser-based password manager. For most websites the login workflow is: Go to login page. Both username and password field are visible. Credentials are auto-filled by password manager. ...
user avatar
1 vote
3 answers
184 views

Should keyboard suggestion bar be enabled when typing password?

Some apps have keyboards suggestion bar, like on the picture below, enabled on password fields. Is it a good UX or security practice to have suggestions while typing existing or creating a new ...
user avatar
  • 933
2 votes
1 answer
5k views

Is Google using the password show/hide toggle icon on their login form correctly? [duplicate]

Shouldn’t the icon be the action that will happen after you click/press on it? ...similar to when a video or song is playing, the icon showing is “Pause” (future state), and when it is paused, the “...
user avatar
2 votes
1 answer
60 views

Example workflow when changing a site's identify provider

I'm switching a site from ADFS/AD to Azure B2C/AAD and require users to reset their password. Users will also see different log in screens. I'm struggling to find an approach where users won't be ...
user avatar
  • 125
8 votes
3 answers
1k views

Perceived security of magic link/passwordless login

As far as I've read, passwordless login like Slack uses (user inputs their email and then clicks on the login link in their email) is becoming more common and is just as secure as logins that require ...
user avatar
  • 81
2 votes
3 answers
2k views

How to prompt existing customers to change their passwords

I'm looking for some UX examples of how other companies have handled this situation: Scenario: Devs are using an old password encrypting method (sha1) I believe and need to change it to a more secure ...
user avatar
0 votes
1 answer
405 views

Error message in login

In the login page of my software, there are 3 input fields - organization, username, and password. There isn't an option to register, but the registration is done by the organization manager. ...
user avatar
3 votes
1 answer
301 views

Login form: User ID and Password in same page vs User ID in the first page and password in the next [duplicate]

Some major sites like Google and Amazon take 2-page approach for signin. They first ask for ID and in the next page ask for password. What is the advantage in this against single page signin process? ...
user avatar
2 votes
3 answers
207 views

When does it make sense to re-prompt a user for their password, for security reasons?

For a consumer product where a customer has an account, and receives invoices from us ($10k+), and is asked to pay those invoices using a saved payment method (bank or credit card) -- we are debating ...
user avatar
0 votes
2 answers
80 views

Security regarding user's saved card information

so I'm creating an app that allows users to pay for a product with a bank card. If the user decides to save his card information I would like the user to access that information in a way that he could ...
user avatar
  • 112
1 vote
1 answer
77 views

Is there any advantage to bringing the user in-app for reset password vs in a browser?

Is there any notable difference between bringing the user to a browser to 'reset password' vs bringing them back to the app to do the reset? Considering that this platform exists as an app and as a ...
user avatar
  • 4,188
0 votes
2 answers
220 views

Mobile log-in: how to divide two types of user logins and two methods of logging in?

So I'm designing a modile/table log in page. There are two types of users who can log in because the functionalities of the application depend on what type of user they are. Employees and managers. ...
user avatar
0 votes
1 answer
549 views

Best way to show password in case of Unshowing password field? [closed]

I'm developing a Desktop JavaFX application using ControlFX. I have a problem that CustomPasswordField can not show password text instead of points (PasswordField limitation ), it needs some custom ...
user avatar
1 vote
1 answer
131 views

Second level navigation drawer

Situation: I have second level navigation drawer. 1st level is with 3 cards (LDAP configuration, LDAP encryption, LDAP authentification). On the second level(LDAP configuration) there are no cards, ...
user avatar
0 votes
1 answer
154 views

Reset password with MFA

I need to implement a reset password feature with MFA. The plan is to use these 2 factors: ask a security qs and email/sms a code to the user. I think the order of these should be answer qs---> send ...
user avatar
  • 1
1 vote
1 answer
418 views

Use native keypad or custom one in web application

I'm tasked to implement a code entry view which allows you to enter a 6-digit code. The UI runs in the browser (JS/HTML/CSS), mobile touch devices only. I'm stuck on how to implement this, basically ...
user avatar
  • 111
0 votes
1 answer
111 views

Should the password field be cleared if there's a connection error?

I have a desktop application which has 3 fields for logging in: Username, Password, and Server URL. After reading similar questions, I've decided that my application will reset the password field if ...
user avatar
0 votes
4 answers
213 views

When is a good time to set a Pincode?

I'm working on a Mobile Wallet for Android that hast the following sign up flow: 1) Download and install 2) Opening screen 3) Enter Phone number 4) Phone number verification (...
user avatar
1 vote
2 answers
188 views

Password Restrictions vs No Restrictions

When a user is presented with a password creation form of any kind, is it necessary to add parameters to their password so it meets certain security requirements (complexity etc)? These parameters ...
user avatar
  • 1,855
2 votes
2 answers
2k views

Changing password: Verify with old password, verify by email, or don't verify?

Scenario I want to change my password. I have access to my account, this is not a forgotten password journey. I've seen three approaches to this. Method 1: Re-verify with old password Log on ...
user avatar
4 votes
1 answer
476 views

Studies on Sign In Authentication Error Messages

So, after browsing other threads, I found some information on the question of when a user is logging in, and fails to authenticate do we give the user the message "Username or Password is incorrect" ...
user avatar
3 votes
1 answer
203 views

Is the Mac’s “Wrong Password” gesture universally understood? [closed]

When an incorrect password is entered into an Apple Mac’s login prompt, the dialog gently shakes as if the operating system is shaking its head at you. This is a delightfully intuitive way to ...
user avatar
  • 373
2 votes
1 answer
2k views

Show or hide password - icon or textual?

Allowing the user to toggle visibility is becoming a more standardised part of forms, and in my opinion for good reason. I'm however unsure what the best way to denote this ability is; an icon or a ...
user avatar
3 votes
1 answer
313 views

Change Password Control

My idea of manage password section is to enable only Current password field at first. If the user enters correct password in the field only then the fields beneath it would go in enable state. Would ...
user avatar
  • 1,819
3 votes
1 answer
100 views

What is the name for the pattern of requiring the user to enter their password again to access high value profile information (billing, email)?

Many sites leave the user logged in for typical tasks but require the password to be entered again for certain high-value screens if it's been too long since the user authenticated with username and ...
user avatar

1
2 3 4 5