Storify by Luke Wroblewski

Yahoo! & Sprint Displayed Passwords at Scale. What Happened?

I published on article outlining how we show passwords on our new mobile app, Polar. Mike Lee shared what Yahoo! learned when they did something similar. Thanks for the info Mike!

LukeW | Mobile Design Details: Hide/Show Passwords
Passwords on the Web have long been riddled with usability issues. From overly complex security requirements to difficult to use input fi...
Share
Share on Facebook
Share on Twitter
Share on Google+
Share on Linkedin
Share by email
Lukew
Mike Lee @MikeLee
@lukew when I was at Y! We eliminated the second input field and displayed the full password prior to form submission. Eavesdropping unlikly
Wed, Nov 07 2012 08:04:47
Reply Retweet Favorite
Mike Lee @MikeLee
@lukew the rationale was that the user should have more control to physically protect view of the PW. Make the overall form shorter / easier
Wed, Nov 07 2012 08:06:09
Reply Retweet Favorite
Mike Lee @MikeLee
@lukew We saw double digit improvements in the overall flow, but that was also influenced by other changes to the form. No security issues.
Wed, Nov 07 2012 09:32:09
Reply Retweet Favorite
Mike Lee @MikeLee
@lukew and by improvements I mean on overall reg conversion. We also eliminated dependency on proprietary ID and allowed mobile # as the ID.
Wed, Nov 07 2012 09:33:44
Reply Retweet Favorite
steven hoober @shoobe01
First time I removed masking/dupes was Sprint All 20mm customers needed new pswd (CPNI). Success, NO issues. Tested, well-measured. @lukew
Wed, Nov 07 2012 09:59:35
Reply Retweet Favorite
steven hoober @shoobe01
Did this years ago for /desktop/ web with no security issues and /huge/ proven usability success. Required for mobile!!! @tkadlec @lukew
Wed, Nov 07 2012 06:57:55
Reply Retweet Favorite
Jonathan Heron @jonathanheron
@tkadlec @lukew Lots of clients worry about negative security perception from users when showing passwords…
Wed, Nov 07 2012 06:37:11
Reply Retweet Favorite
Jonathan Heron @jonathanheron
@tkadlec @lukew We rolled it out for a large client recently & had zero negative feedback from either user test participants or live users.
Wed, Nov 07 2012 06:37:12
Reply Retweet Favorite
steven hoober @shoobe01
I forgot to link to my pattern on signon for mobile. Large portion is/assumes not masking, explains issues 4ourth.com/wiki/Sign%20On @lukew
Wed, Nov 07 2012 08:20:58
Reply Retweet Favorite
Kim Marques @ContentKim
This is such a simple and elegant fix to a UX problem we all deal with - mobile passwords. From @lukew: http://www.lukew.com/ff/entry.asp?1653
Wed, Nov 07 2012 08:05:07
Reply Retweet Favorite