Behind the sign-in.
WHY IT IS OFTEN WORSE
Areas behind a login receive less testing and less design attention than public pages.
WHAT TO CHECK
The login form: labels, error messages, password field behaviour
Password requirements stated before submission, not only in an error Any two-factor step, which frequently uses custom components Account pages Anything the member must do regularly
THE PASSWORD FIELD
Allow pasting. Blocking it prevents password manager use, which disadvantages people who rely on them.
A show password option helps people who type with difficulty.
TIMEOUTS
A session expiring while someone is completing a form is a serious problem for anyone working slowly.
Warn before timing out, and allow extension.
CAPTCHAS
The traditional image puzzles exclude blind users entirely. Audio alternatives are frequently poor.
Use a modern alternative that does not require solving a visual puzzle.
ERROR MESSAGES ON LOGIN
Must be announced, not only shown.
TESTING
Log in, navigate the member area, and change a setting, using only the keyboard.
