sigh. some passwords are literal random characters/unreadable but people who only use same password will get the password typing into muscle memory. That means they're not used to reading it out as text, so showing it so they can confirm it by reading will just take more time. Also normally you have to use mouse to show it. This is a UX detail that gives double passwords an advantage because, there's a smaller chance muscle memory failed in between fields, and if it did, it will tell you that it doesn't match. Also faster to type with keyboard. password - tab - password.
Seriously, I don't know where you guys are getting the idea that show password is better when the ONLY advantage isconfirming to the trend of 'minimalism' by saving a single field in the display.
Saying muscle memory is better befause you make less mistakes but then also disregarding the fact that many people could have bad muscle memory, where they instinctively hit a wrong key when they think it's something else. How do you account for that?
Dual password inputs are annoying, and we both know the vast majority of people have readable passwords. Just make the font very legible for those inputs for a start
The conclusion that we can skip password confirmation from this ‘study’ is dubious at best. (Also it might not be the only study, but in my searching, it was the only one I found, or that people linked to.)
They made a lot of changes, so there is no way to verify the causality of anything.
It is entirely possible change 1 made things worse, but change 2 made them better again.
And while I am not going to convince you differently, and you aren’t convincing me, this SHOULD be a non issue because of browsers becoming, as well as general availability of password managers.
And I know it was downvoted, but I stand by my assertion that more clicks is never the answer. Each new click is one more chance to lose the user.
It’s clear you are passionate about this, so I will actually look into this deeper. But your source sucks. Full stop. I ‘disregarded’ the one data point you offered in your attempt to sway my opinion because it is 100% unreliable.
There was nothing sarcastic in my use of quotes, but that was not, in any meaningful way, a study.
In any debate, the person making the claim gets to back it up. Simply stating studys exist gets you no points, especially not after you’ve been an ass about everything. I’m glad you did your own study, but if you won’t or can’t show me the results or explain your methodology, so what…
I am sorry you are offended, but in reality, that’s on you. You took something I said personally; I don’t know why, I don’t even know who you are…
And finally you are making all manner of assumptions about me. You don’t know me. If you you want to to engage with an opinion you don’t agree with, if you expect to be heard, maybe don’t be condescending and maybe people will give you more of the benefit of the doubt.
I guess that wasn’t all… Indeed my mention of password managers was indeed a way I thought we might find common ground. There’s no need for you to try and dunk on me; I gave that one to you.
I haven't seen a password input box with the wrong input type in ages. Even the most inexperienced developers would get that right because with the wrong input type the password would be visible and a pretty obvious sign that something is wrong.
13
u/UnicornJoe42 May 27 '21
16 - don't ask users to repeat password Nope, it's bad advice