4 ms·
I would steer away from using a username as a login. A person's default username may be taken on your site, in cases like these people usually use a variation b
by 12s12m 9y ago
I would steer away from using a username as a login. A person's default username may be taken on your site, in cases like these people usually use a variation by appending some numbers/characters. Now, when they try to login they'll use the default username first because they don't remember. Using email removes all these barriers.
Why even add a username? I usually don't add them unless they are necessary (in cases where a user's profile, other information needs a pretty url)
- Doctor_Fegg 9y agoSo much this. Particularly, services which insist on you logging in with a username, but can send you your username by email if/when you forget it, should suffer horrid flaming death.
- jwfxpr 9y agoMy god yes. I get caught up in this with Steam maybe once a year — frequently enough that I grimace in irritation at every Steam login prompt. Repeated logins using my email address and password, increasingly obscenely expressed frustration, follow the password reset process — emailing me a reset password link, at which point I usually remember why this keeps happening and go back to login with my username. I mean, I understand that one could make a case for such a high-value target as Steam to not allow email/password pairs considering the high rate of password reuse. But I have 2FA enabled as well for heaven's sake. And I cannot believe that simply insisting on username/password pairs instead is better enough to justify it, compared to real best practice password policies. I mean jeez, how many username are just the pre-@ portion of the email address anyway??