HTML attributes to improve your users' two factor authentication experience

#1

Post by ecaron » Sat, Jan 11, 2020, 8:34 PM UTC

HTML attributes to improve your users' two factor authentication experience
twilio.com

Re: HTML attributes to improve your users' two factor authentication experience

#2

Post by stockkid » Sat, Jan 11, 2020, 9:33 PM UTC

> In a sign up form, make sure to use the "new-password" value as it triggers password suggestions in some browsers.

Nice. I didn't know about that.

Re: HTML attributes to improve your users' two factor authentication experience

#3

Post by cyberferret » Sat, Jan 11, 2020, 9:37 PM UTC

This is a really cool and informative article. I had head of the 'pattern' attribute before, but I hadn't come across 'inputmode' before. This will solve a ton of headaches for my future development work.

Re: HTML attributes to improve your users' two factor authentication experience

#4

Post by skunkworker » Sat, Jan 11, 2020, 9:38 PM UTC

I wish more sites would follow these protocols. When you have a numeric 2FA with a regular keyboard it feels less polished.

Re: HTML attributes to improve your users' two factor authentication experience

#5

Post by tobyhinloopen » Sat, Jan 11, 2020, 9:40 PM UTC

Didn’t we just learn you shouldn’t use SMS 2FA?

Re: HTML attributes to improve your users' two factor authentication experience

#6

Post by reaperducer » Sat, Jan 11, 2020, 9:41 PM UTC

tobyhinloopen wrote: post #5

Didn’t we just learn you shouldn’t use SMS 2FA?

A lot of people say that. But SMS 2FA is better than nothing.

Re: HTML attributes to improve your users' two factor authentication experience

#7

Post by philnash » Sat, Jan 11, 2020, 9:43 PM UTC

tobyhinloopen wrote: post #5

Didn’t we just learn you shouldn’t use SMS 2FA?

SMS 2FA is still stronger than no 2FA.

Re: HTML attributes to improve your users' two factor authentication experience

#8

Post by JshWright » Sat, Jan 11, 2020, 9:45 PM UTC

reaperducer wrote: post #6

tobyhinloopen wrote: post #5

Didn’t we just learn you shouldn’t use SMS 2FA?

A lot of people say that. But SMS 2FA is better than nothing.

Is it though? Implementing SMS 2FA often means a site will never bother implementing anything better.

Re: HTML attributes to improve your users' two factor authentication experience

#9

Post by notlukesky » Sat, Jan 11, 2020, 9:50 PM UTC

SAASPASS has a much better 2FA user experience on the mobile phone than SMS including URL callback to the 2FA app and app to app with SDK. For desktop environments configurable MFA methods include scanning encrypted barcodes and push login. More on the developer environment is here:

developer.saaspass.com

I work for an IAM consultancy/reseller and work on SAASPASS implementations.

Re: HTML attributes to improve your users' two factor authentication experience

#10

Post by philnash » Sat, Jan 11, 2020, 9:52 PM UTC

Hello! I’m the author of this article. Thanks for posting! Here’s to the power of HTML attributes and better sign in experiences for everyone.