 Spent tonight refactoring the @pixelfed login UI I wasted more time than I'd like to admit trying to work around chrome auto-fill to focus the input (and style it) only to discover that it's not possible because its a security risk 😑 Anyways, this is my 3rd login refactor and it will be shipping despite the slight UX "bug" of Chrome requiring user input or interaction for auto-fill And don't worry, this will also work with password managers 😅 #pixelfed 7 comments
 EighthLayer | Jamie, some definitely do it because of SSO, because depending on the domain of your email, you might not need a password. Others (Apple, looking at you) do it just because they hate their users. In my own opinion, this is never a good idea and even when someone uses SSO they could just be instructed to leave the password field blank. It's even worse when sessions expire (that's just my pet peeve that sessions should always live forever). @EighthLayer @pixelfed We're going to add "magic link" support so you can login via email, we're also using it strategically for security reasons Login v2 vs v3 design The v2 design was more bold and distracting, I decided to start from scratch using a similar layout to the existing design for v3 to keep the focus on the intent/action v3 uses animations and loading indicators when applicable and is overall a better UX IMO Password resets and 2FA is also much better in v3  @dansup Honestly, the new one is too low contrast and my eyes get lost in it. Where is the focus? |
Gregory's Server
@dansup @pixelfed Out of curiosity, what’s the purpose of websites asking for just an email first, rather than asking for email and password at the same time? I’ve noticed it more and more recently.