I thought the last one was just my computer being glitchy. So what’s the deal with that?
You guys don’t just reset your password every time you log in to something you don’t use daily? They’ll never get my password if even I can’t remember it, moving target!
1Password has been my go to. It will autofill 2FA if I register it with 1PW. The sites that still send text and don’t allow authenticator apps still bug the shit out of me.
“Passkey already created for this device”
What really grinds my gears is that every goddamn login site now has separate pages for username and password, so the Autofill {Username}{Tab}{Password}{Enter} scheme doesn’t work anymore.
Now you have to wait an unpredictable amount of time until you can enter your password.
Also another quck vent if someone from my bank is reading this: Please explain to me why I always have to 2FA my browser login with my phone, but not the other way around? How tf is that safer when I can do anything solely on my phone anyway, which has no 2nd factor?
People in this thread: “Can you just let me log in please? Oh and please also make sure nothing happens to my account, I’m saving my credit card in here, ok? And when I place an order, just use the saved card, no need to ask me, thanks!”
I get that the UX sucks, I get that corpos shouldn’t require an account for meaningless use cases, but man if you’re logging into an actual application that you truly use, especially if there’s money or privacy involved - literally deal with it and wait for the next improvement to have better UX. People are trying to steal your shit and 2FA/Passkeys protect you.
Passwords can fuck right off. We’re done with those.
I have never ever had a card or login exploited due to my actions.
I have however, had several companies with increasingly insane login requirements “oopsie!” and leak my shit anyway
Even worse:
Page 1: enter email or phone number
Page 2: enter password
Page 3: enter 2FA
okay, but why the fuck am I entering a password if you’re forcing me to use 2FA?
Corposluts: “iTs MoRe SeCuRe”
BITCH - If I can fucking reset my password with the same email/phone number I use to receive my 2FA, then the password is functionally useless
Well it wouldn’t be 2fa if you don’t use a password. Then it’s just 1fa.
(in case you didn’t know, 2fa stands for two-factor authentication, as in secondary authentication (usually besides a password))
Damn do I hate websites that do this. It’s always a gamble if Keepass can handle their stupid multi-page form correctly.
I tend to keep my ass in my pants, not always, butt usually.
this was the first time I read that as Keep ass
I hate that Microsoft/Google have 1 account for hundreds of services. I want a different account for each service but that requires logging out and back in multiple times.
some fuckass website i’ll use thrice in my life: you NEED to add a passkey. for SECURITY. it’s IMPORTANT. DO IT!
my bank: heyyyy wanna do 2fa? it’s ok if u don’t… oh u do??? yaysies! ^w^ okay so. we can do sms or app notification :3
The worst way of login:
Login with Google
Login with Facebook
Login with GitHubFollowed by the login that doesn’t let you use a password but sends you a mail with a link instead. Straight from hell.
Even worse. They automatically create an account if you don’t already have one through the login mechanism, so you get multiple accounts that can’t be merged.
you get multiple accounts that can’t be merged.
- microsoft
- github (owned by microsoft)
Huh? That’s a thing?
I coded a SSO like that where all you did was put in an email and put the code in in like 2nd year of work as a dev.
Is that seriously an issue where that can cause duplication on some platforms?!
No that’s weird to me. Even if you connect different social auths the platform should connect to the same email address
Don’t forget it starts off with only an ‘email’ field and only shows the password field after you fill that out and click a button, just to make sure that the login flow is as crap as possible for your password manager to deal with.
Those are really annoying. They sometimes cause trouble with autofill and it means jumping through 3 pages if 2FA is enabled.
That’s fine. There’s multiple reasons to do that, most notably SSO stuff.
Click Log In, it leads to a new page where you choose Personal Account or Business Partner.
Click Personal, it takes you to a page with a Log In button.
Also:
- “Would you like to sign in with a Passskey?”
- Yes.
- “You don’t have a passkey!”
One site I used recently forced Passkey sign-on only, but when I tried to set one up on a second device, it said it would replace the first one! They’re meant to be per-device credentials!
I really hate when the login button is hard to find relative to the sign up button. It should be the other way around; you only sign up once, but you log in many times. It should be optimized for the more frequent task.
Why do you need a login button? You use a browser? Just download our app, it’s so convenient!*
*for us and our 398 advertising partners.
Do you guys not have phones?
word, friendica used to be like this and I kept getting messages like “this user already exists” half the time I was trying to log in.
To me it’s always felt like a pretty blatant way to say they don’t give a shit about their existing users.
Users unfamiliar with the interface should get the big button.
“Stay signed in”, the biggest lie
You forgot the part where it shows your username on the profile link like you’re already logged in before they make you do all that bullshit.
