Live data from Hacker News

Single input login form

awayback.com

11–20 of 61 posts

Re: Single input login form

#11
Your username is incorrect, but password ok!

Seriously, login is not the place to be helpful. On the contrary, for security reasons, the login control should be hard to find, and the error messages should be cryptic, like "ehh". You can reward their patience on the other side.

Re: Single input login form

#12
I see single form logins useful on Mobile devices -- especially since I do not particularly care if my password is masked on mobile devices.

Mobile phones are distinctly lacking "tab" and changing input forms is usually a pain.

Re: Single input login form

#13
post #7

Please, please don’t use this. 1. Besides the obvious UX problem of unfamiliarity, I would also expect some people (myself included) to worry about whether or not their password will be masked. 2. The “Password” placeholder in the mockup is actually impossible to reliably implement (on the web)… consider a 44-character username, for starters. 3. You are now responsible for removing the password from the DOM on page b…

With regards to #2 - the assumption with his design appears to be that the input field is long enough to fit the longest username and the password. Given that both the username and the password lengths are typically capped at relatively short values, the assumption is reasonable. But even if there is an overflow, I don't really see it being a problem - the password is no different from a regular input except that all chars are dots. If whatever is typed does not fit, the regular scrolling paradigm will still apply here.

With regards to #3 and #4 - a standard password input control can be used to capture and display the password. Make it borderless and reposition it dynamically based on the length of the username. Not that it'd be a very elegant implementation, but it is doable nonetheless.

Re: Single input login form

#15

Your username is incorrect, but password ok! Seriously, login is not the place to be helpful. On the contrary, for security reasons, the login control should be hard to find, and the error messages should be cryptic, like "ehh". You can reward their patience on the other side.

I beg to disagree.

1) If your login form annoys me it's very likely that I won't be using your service e.g the HN OpenId login is pretty much broken if I have noscript enabled so if there wasn't a normal login I wouldn't be here. So yes, it should be helpful. I'm not a mind-reader and I don't like to play mind-games so if I do something wrong then I expect to be told what I did wrong.

2) I'm not sure how that helps security. If a human can find the login form it means a human can write a program(i.e a bot) that can also find that form...

2.5) For security reasons, I've never and understood this or where it came from. If your service allows login then in almost all cases it also allows registration. I can understand if you're among those who feel the need to annoy users that try to register by telling then that there's an error in the form they submitted with no indication of what that error is but otherwise you will return some error if they try to signup with an existing username. This boils down to one extra step to find out if the username is wrong or not. For a human that might be tedious. Even if you give vague error messages at registration it's still trivial to use this same vague error message to figure out if a username exists or not.

Re: Single input login form

#16
post #7

Please, please don’t use this. 1. Besides the obvious UX problem of unfamiliarity, I would also expect some people (myself included) to worry about whether or not their password will be masked. 2. The “Password” placeholder in the mockup is actually impossible to reliably implement (on the web)… consider a 44-character username, for starters. 3. You are now responsible for removing the password from the DOM on page b…

#4 isn't hard to overcome with unobtrusive JS.

But agreed on the other points. Usability FAIL.

Re: Single input login form

#18
post #4

From a personal point of view, I've been using keyboard buttons to navigate through forms for so many years (tab to go to next field, space to tick/untick a checkbox, etc.) that it wouldn't save me any time. From the point of view of more generic computer users (such as my mother), I wouldn't think learning to type a space would be any easier than learning to hit tab, and would probably just cause confusion, due to t…

This makes me think of the people that don't use the tab key to move through fields. Instead, they click on the next one. What is there to click on with this?

Re: Single input login form

#19
post #9

A better way to do this: * Have a text input and password input HTML entities next to each other with CSS that removed the right/left border and spacing (dynamically resize the input boxes if you like) * Capture a space keyprees event to shift focus to the password field * Same effect, but degrades in non-JS browsers to a normal entry field and allows the browser to still provide password remember, masking and form p…

Why do this at all? Tab isn't any harder than teaching users that on your site and only your site, space works the same way on one field. Poor discovery and dubious benefit is not a great combo.

That said, you're right that it would be a better implementation, assuming backspace effectively shift-tabbed.

Re: Single input login form

#20
This has so many security and design concerns it's not even funny. Everyone has already said so in this thread already so I won't add to that, but I do want to add an even better solution. Add a remember me checkbox that when checked sets a cookie that you can use to identify the person with later. When the user gets to the login, he's presented only with the option to enter his password, and a link to login as a different user. Single input element without the security concerns.
Post reply on HN