Design Authentication Without Creating Friction
Trust, Privacy & Ethics · authentication, attention
Updated 2026-07-28
- Security should protect users without making the experience painful.
- Make recovery easy:
- Password reset should be visible.
- Login problems should have clear solutions.
- Write authentication errors clearly:
- Explain what happened.
- Explain what the user can do next.
- Support password managers:
- Allow paste.
- Support autofill.
- Do not force unnecessary manual entry.
- Handle sessions respectfully:
- Warn before expiration.
- Preserve user work.
- Avoid unexpected logout loss.
- Good authentication feels secure without feeling like a barrier.
Related guides
UX Handbook