guerillagirl

A very good read by Albrecht Schmidt (LMU Munich) about security and UX >> Don’t Blame the User: Toward Means for Usable and Practical Authentication

„[…]When the user comes to use a service for the first time, many companies require registration. This is reasonable, as registered users are a valuable asset. However, asking the user for a password at this point is a bad idea. The user’s primary goal is to use a service. Providing a password is an obstacle; hence, it is likely that they will not give much thought about it and will choose a weak one.“

https://interactions.acm.org/archive/view/may-june-2019/dont-blame-the-user