Skip to main content
6 votes
Accepted

Verifying an account with SMS as opposed to email address

A lot of people use their phone to sign up for services. Having to go to your messages to copy the code and then drop it into the interface can be slower than just going into your email client and ...
Wendy Wojenka's user avatar
6 votes

What is the best mobile number authorization strategy?

Both are equally good in terms of security. According to me the first senerio is good enough and adapted one. We are used to first senerio. The second senerio doesn't making much changes and ...
Abhishek Sharma's user avatar
4 votes

Verifying an account with SMS as opposed to email address

It's best to offer both email and SMS sign-up -- some users prefer the control that an email address provides, such as in cases of householding (when a couple or family signs up for an account, and ...
Izquierdo's user avatar
  • 12.7k
3 votes

Account verification codes: Which part of the telephone number do you show users?

A general principle to follow is to provide enough information for a user to identify the known phone number, while restrict others from any unintended use of it. Most commonly, last two digits will ...
Pavel Ryzhov's user avatar
2 votes

Verifying an account with SMS as opposed to email address

I would share my experience with lots of banking, wallet, Social apps which are actually asking for verification via an SMS. Even Apple is sending a verification SMS to its servers before activating ...
Shabir Gilkar's user avatar
2 votes

What is the best mobile number authorization strategy?

I have to be honest and say I have never liked the idea of verifying mobile phones as a security measure. More places are starting to use this as their sole verification method, which causes major ...
Monomeeth's user avatar
  • 3,826
2 votes

is replying to an sms a reliable way of authenticating a response

You should never rely on SMS. Delivery is not guaranteed, and you have no way to determine whether or not it took place. Additionally, SMS is not encrypted, and from a security standpoint, it is not ...
jsejcksn's user avatar
  • 687
2 votes

What is best way to display a partial mobile number

For some reason, your user is seeing multiple mobile numbers and you want to obfuscate them. To me best strategy is to compare the options you are going to show to user and obfuscate accordingly. See ...
Prateek Shrivastava's user avatar
2 votes

What is best way to display a partial mobile number

Some assumptions: a) The target country is India. b) User can choose last four digits. c) The possibility of the first 4 digits to be the same is very high, if the sim card/number is purchased ...
Anvesh Dunna's user avatar
1 vote

Verifying an account with SMS as opposed to email address

"Are there any valid reasons why a user couldn't receive an SMS message in order to complete their registration?" Sure ... Consider the following scenarios: Why should I give you my real cell phone #...
mc01's user avatar
  • 1,435
1 vote

What's a reasonable amount of time to wait for an SMS?

Firstly, I would review the system that sends the SMS and discover the average time it takes for those texts to be sent. More efficient systems send it immediately, others may take a few minutes, ...
Mihnea Patrascu's user avatar
1 vote

What's the optimal number of digits for a verification text message?

Most 2FA/MFA apps (Microsoft and Google ones) use 6. I'm imagining this is because people remember 7 items (+/- 2 https://lawsofux.com/millers-law.html) best. Six is the same as a phone number ...
dougajmcdonald's user avatar
1 vote

What's the optimal number of digits for a verification text message?

As is common when dealing with user experience and security, this is a balancing act. For the user experience side of it, I'd recommend you read at least the introduction of the Short-term memory ...
maxathousand's user avatar
  • 19.5k
1 vote

What is the best way to map a product's system of notifications?

There is actually a helpful article from the Smashing Magazine about Including Animation in Your Design System, which goes into some details about why this would be useful when you are trying to ...
Michael Lai's user avatar
  • 27.3k
1 vote
Accepted

What is best way to display a partial mobile number

The reason to show the user the number he could use to continue is to request if its the number he wants to use. So your goal is to let the user know if its the correct number and for this goal he has ...
phng's user avatar
  • 218
1 vote

registering to an account by an sms link in a mobile

I don't think it's a bad pattern to use in particular. It's probably just developed historically to be seen problematic in overall implementation and usability because of rules and restrictions. I ...
ntnlbd's user avatar
  • 344
1 vote

Flow for alternate (to SMS) security verification

Slight rant here, skip to Adjust your call to action for the actual answer. IMHO, security questions are super gross in terms of UX. It causes a harsh break in the normal flow of authentication and ...
drognisep's user avatar
  • 141
1 vote

What is the best mobile number authorization strategy?

Two-way verifications are much more secure due to using different communication channels. The first path will be better in terms of user experience and security. You need to reduce the barrier Two-...
Abektes's user avatar
  • 5,583
1 vote

What is the best mobile number authorization strategy?

I'm surprised that nobody has pointed out that this is wide open to a spoofing attack. Sending an SMS with a spoofed originator (the sender) is incredibly easy and costs very little to do. You can't ...
Daveoc64's user avatar
  • 111
1 vote

What is the best mobile number authorization strategy?

Sorry to use the answer function, but I don't have enough reputation to comment yet. :( I just wanted to say I really like the 4 step approach that Monomeeth suggests. I'm a huge fan of the KISS ...
Little Eden's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible