Post

Playing around with WebRTC on CodePen, I took a stab at using links to carry the handshake values so users dont have to see long hash strings. Its a proof of concept in simplifying the pairing experience while establishing a connection using entirely front-end logic. codepen.io/cwacht/pen/J...

Yep, make solution to imaginary problem. Solution is ridiculously complex. So fix the problems it introduces. Instead of solving actual problems. Ah well, we have fun.

Ultimately -Those receiving code on the same device will often not type the code -assistive tech over index receiving code on a different device -each input needing an exceptionally verbose hidden label -to auto tab or not -navigating back to fix a mistake -paste (can be spread obvs) …

Oh I shall not! But dates are the only exception I can think of.

They should be one! A date input!

Yep same although the peeps who advocate for it will probably blame that on bad implementation.

please please please tell me your results have been written up in a blog post that I can share with my clients 🤞🏻🤞🏻 They're determined to have multiple inputs without any of the necessary accessibility support, like labels. Or copy-paste.

Not good. If it's one input it should look and behave like one input.

One issue I have with these is when it auto applies the code and I don't have time to check "don't ask me again for 30 days". That really ticks me off 😆

They can definitely be better but I do appreciate this pattern over creating an account.

There’s a real friction between great UX & security, and I can appreciate a lot of the challenges and compromise required to strike a balance. But please for the love of all that is holy, try. This awful-yet-currently-necessary experience is a critical touchpoint for your brand, so get it right.

⦿Can’t copy-and-paste the code without weird whitespaces before and after the code that make it unusable in the destination form because it only keeps the 6 first digits of what you paste

Love this article! OTP / login codes are impossible to get right... P.S. I think you mean 'defuse' instead of 'diffuse' when talking about bombs

My biggest frustration is when the code field doesn't automatically get keyboard focus. So I am typing away and then look at the screen and...argh.

Login forms themselves are getting worse too

Your Login Code is: IlıIÏłI1 You must type it out. Pasting has been disabled.

One thing to add to the bad list: no autofocus bsky.app/profile/wick...

I've had this happen awhile back and assumed it would become the new normal really quickly... Can't remember what app it was, and I haven't experienced it in forever now 😔

Sites that let you use an authenticator app over a text/email are S-tier. 1Password automatically copy/pastes and goes through the whole flow for you.

I like the separate boxes for number only codes. It clearly shows each digit and bonus points if the email has extra spacing around each digit. But... "Can I paste? Where do I paste? Is my paste going to carry over into all of the little boxes?" If it doesn't carry over I'm mega upset.

Interesting! I view them as an accessibility affordance; a user who is easily distracted or has a hard time switching between physical and digital has an easier time keeping track. In before times the copy/paste used to break but I haven’t seen that problem in a long time. 😳

the worst is selecting a code and maybe a blank space after it without realizing, pasting it in and clicking submit and the code does not work because they aren't trimming the input of blank spaces, it's endlessly frustrating !

Every time someone complains about the UX of passkeys, like clockwork they are using a password manager that tries to insert itself into their passkey flow. Please consider that your case is not representative and a vanishingly small minority of people user password managers.