Ask YC: Login system

#1

Post by drewcrawford » Sat, Jun 21, 2008, 7:03 PM UTC

I'm working on a startup involving lots of sub-$1 payments. Because of this, we pretty much need a valid e-mail address.

Our options are: A) Let the users create an account, type in an e-mail address, and we send them a verification link (I hate these) B) Let them log in with a Google Account. They would actually be redirected to a Google.com page to log in, and Google would give us the e-mail address (we never have their password).

Personally I'd much rather do B as a user, but I can potentially see some confusion for users, especially if they don't have a Google account already. In theory we could allow both, but for launch we are only going to spend time on one. There's also a concern that some users would think it's a scam to get your Gmail password (even though it's entered on a Google.com site).

What do you think?

Re: Ask YC: Login system

#2

Post by jkent » Sat, Jun 21, 2008, 7:12 PM UTC

What about clickpass? Although that might be subject to trust issues too.

Most users are familiar with the verification concept, although still don't like it.

Can you explain why you need a valid email address to do payments?

Just allowing Google accounts limits your market somewhat, but if you are going for techies first, then you should be fine.

Re: Ask YC: Login system

#3

Post by christefano » Sat, Jun 21, 2008, 7:23 PM UTC

At my sites I like allowing members to create accounts without email validation. To post anything, however -- or in your case, send or receive funds -- their email needs to be validated and I use a persistent message in the header to remind them of that.

I would personally never use your site if you required a Google account to log in.

Re: Ask YC: Login system

#4

Post by Stabback » Sat, Jun 21, 2008, 7:59 PM UTC

I'm also confused about why you need a valid email address for the payments. A little clarification would be good.

I would recommend against the Google account login system, I prefer to try to keep some of my life secret from Google.

Have you considered openID?

Re: Ask YC: Login system

#5

Post by pierrefar » Sat, Jun 21, 2008, 8:12 PM UTC

Control the username/email and password and ensure that the password is very strong. We're talking about money here, so it's best that you control access as much as possible.

Re: Ask YC: Login system

#6

Post by djm » Sat, Jun 21, 2008, 9:16 PM UTC

"I can potentially see some confusion for users"...."for launch we are only going to spend time on one"

I think you've answered your own question here. I'd go for option A - it's something users will be more familiar with from their experience using other sites and it stops you losing users who don't want to create a google account if they don't already have one.

Your users are what is most important and the deciding factor in decisions such as this should always be to do whatever makes things easiest for them.

Also, why do you need to link a user to an email address to handle payments?

Re: Ask YC: Login system

#7

Post by arthurk » Sat, Jun 21, 2008, 9:25 PM UTC

christefano wrote: post #3

At my sites I like allowing members to create accounts without email validation. To post anything, however -- or in your case, send or receive funds -- their email needs to be validated and I use a persistent message in the header to remind them of that. I would personally never use your site if you required a Google account to log in.

That's a great functionality you'll see on some sites with the lost password function. You can register without an email and use all functionality except the "lost password" function — if you want to use it, you need to specify it in your account settings.

I think HN and del.icio.us do this.

Is there some other functionality on your site that doesn't require payment?

Re: Ask YC: Login system

#8

Post by tptacek » Sat, Jun 21, 2008, 9:35 PM UTC

jkent wrote: post #2

What about clickpass? Although that might be subject to trust issues too. Most users are familiar with the verification concept, although still don't like it. Can you explain why you need a valid email address to do payments? Just allowing Google accounts limits your market somewhat, but if you are going for techies first, then you should be fine.

It's hard to blame a startup if something goes wrong with Google logins. It's real, real easy to blame them if they went with something as obscure as ClickPass.

Re: Ask YC: Login system

#9

Post by tptacek » Sat, Jun 21, 2008, 9:36 PM UTC

You want option (a). It works, it's proven, it's what everyone else does, it's less annoying than it sounds like, and you're unlikely to screw it up.

Re: Ask YC: Login system

#10

Post by christefano » Sat, Jun 21, 2008, 10:21 PM UTC

arthurk wrote: post #7

christefano wrote: post #3

At my sites I like allowing members to create accounts without email validation. To post anything, however -- or in your case, send or receive funds -- their email needs to be validated and I use a persistent message in the header to remind them of that. I would personally never use your site if you required a Google account to log in.

That's a great functionality you'll see on some sites with the lost password function. You can register without an email and use all functionality except the "lost password" function — if you want to use it, you need to specify it in your account settings. I think HN and del.icio.us do this. Is there some other functionality on your site that doesn't require payment?

> Is there some other functionality on your site that doesn't require payment?

I'm not sure if this question is for the original poster, but I forgot to mention that providing an email address is actually required at my sites. Only after validating the email address are members able to post, vote, etc.

One advantage to this is that I'm able to keep track of who hasn't validated their email and therefore become full-fledged members of whatever site they joined. I can start a conversation with them and learn from them what I overlooked about the site -- or point things out to them that they may have missed.