4 ms·

The unreasonable UX of email verification

• solardev 3y ago
  Seems like you could consolidate steps 3 to 6. The verification link, via a token, instantly confirms and logs them in. They can use a password later.
  • sph 3y ago
    No I've explained that it doesnt work because automated email scanners follow any link found in emails. The verification needs to happen in a POST request to avoid that.
    • solardev 3y ago
      Wait, is this your article? If so, I'm confused... I thought you were arguing how annoying the UX is because of all those extra steps. If so, eliminating the subsequent links would make it faster. And once they're verified, they can stay verified and just log back in on another device with their password or a magic link. If you're more concerned about automated sign-ups, I don't really see how POST requests help. Those are also trivial to automate. Don't you need a captcha or ID.me or a credit card authorization or such? It seems like this particular combination of steps is both more annoying for real humans and also not very effective at stopping bots...?