'Your password is invalid': Improving website password practices

Jan 31, 2012

Internet users are increasingly asked to register with a user name and password before being able to access the content of many sites. In their upcoming Ergonomics in Design article, "A Passport to UX – Design of Password Practices," human factors/ergonomics researchers Soolmaz Moshfeghian and Young Sam Ryu identify impediments to efficient password creation and provide design strategies for enhancing the user experience.

Because there is no standard method for setting up passwords, each Web site employs its own set of requirements and restrictions. After investigating the pros and cons of design-related features of the requirement and restriction practices of 90 popular Web sites, the authors found that more than half the sites failed to display password guidance prior to the first attempt. Users may receive multiple error messages if their chosen passwords do not line up with system requirements, which can lead to confusion and frustration for the user and increased operating expenses for system administrators.

The authors offer a number of recommendations for Web designers seeking to improve the : Provide users with password requirements prior to their first attempt; use clear and concise language to communicate the password requirements; present, at a minimum, length and character requirements; and avoid placing password requirements in the entry box.

"This study helps us gain more insight into the current state of password practices and helps create more intuitive and empathic interactions," said Moshfeghian. "Intuitive password practices lead to increased user trust and thus user sustainability. In short, the optimal goal is to humanize interfaces, make them as intuitive as possible, and bridge the gap between users and interfaces."

Enhancing user experience through effective password practices can have many benefits. A more user-friendly registration process may produce a larger number of successfully registered accounts, which can translate into increased sales and a more recognizable brand. Fewer failed registration attempts can result in reduced system maintenance, security, and recovery costs.

Explore further: Report: FBI's anthrax investigation was flawed

Provided by Human Factors and Ergonomics Society

2 /5 (1 vote)
add to favorites email to friend print save as pdf

Related Stories

Better passwords get with the beat

May 17, 2011

No password is 100% secure. There are always ways and means for those with malicious intent to hack, crack or socially engineer access to a password. Indeed, there are more and more websites and databases compromised on a ...

Tired of Passwords? Replace Them With Your Fingerprint

Sep 14, 2004

If you're like most people, you have more than a dozen passwords and user names to remember. Whether you're checking your e-mail for new messages, catching up on the news, posting to a Web discussion group, ...

Apple patent sends password secrets to adapters

Jan 06, 2012

(PhysOrg.com) -- First-time computer users in the early days, pre-hacking security traumas, were confronted with a new life requirement: creating and remembering system passwords. Not too easy, users were ...

Recommended for you

Report: FBI's anthrax investigation was flawed

Dec 19, 2014

The FBI used flawed scientific methods to investigate the 2001 anthrax attacks that killed five people and sickened 17 others, federal auditors said Friday in a report sure to fuel skepticism over the FBI's ...

Study reveals mature motorists worse at texting and driving

Dec 18, 2014

A Wayne State University interdisciplinary research team in the Eugene Applebaum College of Pharmacy and Health Sciences has made a surprising discovery: older, more mature motorists—who typically are better drivers in ...

Napster co-founder to invest in allergy research

Dec 17, 2014

(AP)—Napster co-founder Sean Parker missed most of his final year in high school and has ended up in the emergency room countless times because of his deadly allergy to nuts, shellfish and other foods.

LA mayor plans 7,000 police body cameras in 2015

Dec 16, 2014

Mayor Eric Garcetti announced a plan Tuesday to equip 7,000 Los Angeles police officers with on-body cameras by next summer, making LA's police department the nation's largest law enforcement agency to move ...

User comments : 1

Adjust slider to filter visible comments by rank

Display comments: newest first

Twin
not rated yet Jan 31, 2012
I hate being told that my password is "not complex enough" or my first name is invalid (J.) I wouldn't mind a warning, but after that, it should be my option.
The fact is that hackers seldom break into individual accounts. They would much rather reach mass data that resides at levels deeper than passwords.

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.