Update on split username-password forms
InternetI’ve mentioned before the anti-pattern of having people use two separate forms for their username and password. Whereas previously you would:
- Type your username and password
- Press Submit
Sites now require you to:
- Type your username
- Press Submit
- Wait
- Type your password
- Press Submit
There are a few reasons why they could be doing this, and none of them are any good. There’s the Titanic lifeboat defence, where having two fields makes the login page look too cluttered. There’s the mutiple-auth system defence, which shouldn’t preclude having two fields for everyone else. But the worst is seeing sites validate people’s usernames independent of passwords, which is such an egregious form of data leakage that I immediately cease using any sites I catch doing it, and encourage you to do so too.
The good news is some sites are waking up to the fact that these split forms are also a huge step backwards for accessibility. But I nearly fell out of my chair when I saw their proposed solution! Okay I lied, I was using my standing desk, like a gentleman:
That’s right, they’ve kept the redundant form, but they’ve added a link to let you edit your username if you made a mistake. But… hold on, you know another form element that lets you edit things? A username text box!
I’m going to call anti-patterns of this nature busywork.