Should I require username at login?

#1

Post by homonculus » Thu, Sep 30, 2010, 9:00 PM UTC

I'm putting together my first website, and I'm wondering if I should bother asking for a username at login. If the password is long enough, won't that be just as difficult to geuss randomly as a shorter username and password?

Assuming the answer to that is yes, it a good idea to force users to choose a password, or would that be inconvenient?

Re: Should I require username at login?

#2

Post by rubing » Thu, Sep 30, 2010, 9:10 PM UTC

you should assign them a password without a username. that would be cool cause nobody else does and really would be just as effective, except you need to assign it...they can't pick it!

Re: Should I require username at login?

#3

Post by [deleted] » Thu, Sep 30, 2010, 9:17 PM UTC

[deleted]

Re: Should I require username at login?

#4

Post by staktrace » Thu, Sep 30, 2010, 9:21 PM UTC

If you need to allow identification of users, you'll probably want some sort of username. And adding a username later will be harder than putting one in now. Also, any deviation from what the users expect/are accustomed to (i.e. username/password) will lead to user confusion. I would just go with the standard username/password login.

Personally I don't mind if you generate a random password for me, but either way works.

Re: Should I require username at login?

#5

Post by psuedonym » Thu, Sep 30, 2010, 9:47 PM UTC

The number of people who pick '12345' or 'password' is astronomical. And forcing them to remember a "strict" password is more detrimental to the user experience than just having a user/password combination.

Besides, what are you going to do if you get dupes? "Sorry, that password is already in use"?

Re: Should I require username at login?

#6

Post by homonculus » Thu, Sep 30, 2010, 9:56 PM UTC

psuedonym wrote: post #5

The number of people who pick '12345' or 'password' is astronomical. And forcing them to remember a "strict" password is more detrimental to the user experience than just having a user/password combination. Besides, what are you going to do if you get dupes? "Sorry, that password is already in use"?

I see now that it is a terrible idea. Thank you.

Re: Should I require username at login?

#7

Post by homonculus » Thu, Sep 30, 2010, 10:02 PM UTC

staktrace wrote: post #4

If you need to allow identification of users, you'll probably want some sort of username. And adding a username later will be harder than putting one in now. Also, any deviation from what the users expect/are accustomed to (i.e. username/password) will lead to user confusion. I would just go with the standard username/password login. Personally I don't mind if you generate a random password for me, but either way wor…

There would be a username, it just wouldn't be a part of the login process. I'm inclined to go with a better system instead of what people are expecting, but that's probably bad policy if I want users :) . A randomly generated password might solve the duplicates problem, but I guess I'll just stick to the standard format. Thanks for the feedback.