4 ms·

This is very unconventional advise. But this is Jacob Nielsen talking on usability. What he says is generally backed by very extensive testing and way more usab

by shabda 17y ago

This is very unconventional advise. But this is Jacob Nielsen talking on usability. What he says is generally backed by very extensive testing and way more usability experience than any of us on news.YC have. You might not agree to unmask all passwords but why not this > It's therefore worth offering them a checkbox to have their passwords masked; for high-risk applications, such as bank accounts, you might even check this box by default. This is spot on as well. > Password masking has proven to be a particularly nasty usability problem in our testing of mobile devices, where typing is difficult and typos are common And on a mobile device, people snooping would be uncommon as well, so why mask passwords on mobile sites? So please think hard on this, before you dissmiss this as stupid or untenable.

deleted 17y ago
[deleted]
jdelsman 17y ago
My gut (which includes reading the article and analysing the way he says things) tells me that he's providing this "advice" out of mid-air. He does not provide proof of concept, and does not provide research. It is bollocks until proven otherwise ;)
oddgodd 17y ago
>So please think hard on this, before you dismiss this as stupid or untenable. I have. This is stupid and untenable. Problem one: Right now if I encountered a login form that didn't mask the password I would probably attribute this to incompetence, not usability. I don't think I'm the only one. Problem two: Right now all login forms work the same. The top field is the username and under that is the password field. This would break that consistency by adding the "show (or hide) password" behavior. In his description he even suggests that some sites default to a different behavior based on some notion of degree of security. Now logging in with someone looking on becomes quite a bit more nerve-wracking because you need to figure out if the password field will disclose your password. This is less usable. Now, where I think this may be useful is if it is added as part of the "invalid password" behavior. Offer to give the user help only if they need it. Provide them a button to show the password they entered, and allow them to try again underneath it to fix any typos or verify that they correctly entered the password they were thinking of. This helps the user without changing the way the login form operates in the default case where a correct password is entered (a password that's probably in the user's muscle memory because they use it for everything). I know I've actually seen this done somewhere, although I can't remember where. Mobile is a bit different. I’m completely behind the times in using a mobile device to access the web, but I know that my terribly slow phone running its gimped browser (netfront, I think?) on its tiny screen quite a few years ago provided the option to display masked fields in the editor window it would switch to whenever filling out an input field. This seems like a better solution to this problem to me (and was almost a necessity on that device since it didn’t have a proper keyboard).
- ErrantX 17y ago
  Wicked. That is a much better considered solution to the problem. That I think is the problem with the original message - the problem IS sort of there but the solution is just too readical for it :P
- jonb 17y ago
  I'm 100% in agreement with you here. Mac OS X's Keychain Access has "show this password", and iPhone does masking but still shows you the last character you just typed for about a second. I think these are both good compromises.

by shabda 17y ago

deleted 17y ago

[deleted]

jdelsman 17y ago

My gut (which includes reading the article and analysing the way he says things) tells me that he's providing this "advice" out of mid-air. He does not provide proof of concept, and does not provide research. It is bollocks until proven otherwise ;)

oddgodd 17y ago

>So please think hard on this, before you dismiss this as stupid or untenable. I have. This is stupid and untenable. Problem one: Right now if I encountered a login form that didn't mask the password I would probably attribute this to incompetence, not usability. I don't think I'm the only one. Problem two: Right now all login forms work the same. The top field is the username and under that is the password field. This would break that consistency by adding the "show (or hide) password" behavior. In his description he even suggests that some sites default to a different behavior based on some notion of degree of security. Now logging in with someone looking on becomes quite a bit more nerve-wracking because you need to figure out if the password field will disclose your password. This is less usable. Now, where I think this may be useful is if it is added as part of the "invalid password" behavior. Offer to give the user help only if they need it. Provide them a button to show the password they entered, and allow them to try again underneath it to fix any typos or verify that they correctly entered the password they were thinking of. This helps the user without changing the way the login form operates in the default case where a correct password is entered (a password that's probably in the user's muscle memory because they use it for everything). I know I've actually seen this done somewhere, although I can't remember where. Mobile is a bit different. I’m completely behind the times in using a mobile device to access the web, but I know that my terribly slow phone running its gimped browser (netfront, I think?) on its tiny screen quite a few years ago provided the option to display masked fields in the editor window it would switch to whenever filling out an input field. This seems like a better solution to this problem to me (and was almost a necessity on that device since it didn’t have a proper keyboard).

ErrantX 17y ago
Wicked. That is a much better considered solution to the problem. That I think is the problem with the original message - the problem IS sort of there but the solution is just too readical for it :P
jonb 17y ago
I'm 100% in agreement with you here. Mac OS X's Keychain Access has "show this password", and iPhone does masking but still shows you the last character you just typed for about a second. I think these are both good compromises.