12

Is registration login using email a better idea than username to identify the user?

4
  • 3
    Perhaps this fits better on ui.stackexchange.com, where I have asked it before: ui.stackexchange.com/questions/720/…
    – user2947
    Dec 26 '10 at 8:45
  • 2
    Perhaps you could expand on your question... Better from a user's stand point? from a security stand point? ease of coding? Better how?
    – Walter
    Dec 26 '10 at 14:04
  • A fair number of apps will allow login via "email or username", which comes in handy fairly often for someone like me, who has at least a half dozen email addresses and roughly a half-dozen usernames I regularly use, and I can't seem to remember exactly which one I use on any given site.
    – JasonTrue
    Jun 4 '11 at 17:14
  • Use OpenId, mate.
    – Job
    Jun 4 '11 at 18:55

10 Answers 10

12

Login name.

  1. Email address was never meant to be a means of identification, but a means of communication

  2. If a user is logging in before somebody's eyes, then their email address will be revealed which is quite bad. If a login name is revealed, it's not a big deal.

  3. Do not automatically turn the login name into a public display name. They're two completely different things. Let the user specify the display name separately. Bonus points, let the user freely edit both the login name and a display name later.

10
  • 2
    +1 for separating login name and display name. More login systems (if not all of them) should do that. Dec 26 '10 at 17:21
  • 3
    That's a non sense. The basic principle of login is telling who you are. The password is here to proves it. If the login is secret, this is now the password.
    – deadalnix
    Jun 4 '11 at 18:07
  • 1
    even worse. Email addresses are more prone to change than other ids. This can cause serious trouble. Say you use your company email address as a login somewhere, then change jobs.
    – jwenting
    Jun 4 '11 at 19:02
  • 1
    "That's a non sense. The basic principle of login is telling who you are." email address doesn't say who you are, only where you can be reached at a specific moment in time. I've worked for companies that recycled them (and the network names associated with them)...
    – jwenting
    Jun 4 '11 at 19:03
  • 1
    @Developer Art: I don't disagree with your views that using a login name is better than using an email address. However, I do disagree with your third point. I think that you are thinking like a programmer, rather than a user. After extensive experience with usability testing, I have found that most people are confused if a system keeps separate login and display names. It becomes cumbersome to maintain. The KISS principle applies here.
    – CesarGon
    Jun 4 '11 at 19:08
30

Consider OpenID. But if you don't want to use that, the plus for user name is that it isn't linked to a specific email. The plus for email is they won't have to remember what they used for a user name.

3
  • 4
    Please, please, please. The fewer authentification tokens the better.
    – user1249
    Dec 26 '10 at 10:26
  • 2
    OpenID's the safest way to do login, but honestly, I don't like the UI. When I sign up for OpenID it feels like you're signing up for two services, and then when you log in it feels like a two-step process because you have to type your password in on a separate page. Dec 26 '10 at 16:31
  • @Rei I agree, don't love the OpenID... yet. I hope it will get better over time. Rob Conery's blog (blog.wekeroad.com/thoughts/open-id-is-a-party-that-happened) is worth reading on this as a reason to have more than just OpenID as a log in right now. It sounds like the standard is still being set, I still think they'll figure it out and have hope for it. Dec 27 '10 at 3:42
6

I think you should allow both user name and email for login (I think this is the system they have with disqus), of course you should only display user name to others as pointed out by Matthew.

Added. Or you can go for OpenID (highly recommended), which is emerging as a sort of internet driver's license.

6

Email definitely. Look, users already have it bad enough with a bajillion user/pass to remember for other sites. Most sites do use the Email Address for the username, so just go with that and make your users life easier...

OpenID ftw... if your willing to invest time to get it setup, I think there is $$ involved to but I could be wrong?

3

There are several reasons to prefer username over email (it would be an abuse of the concept of email, a bystander could read your address - not that I would care the slightest, but some could) etc, but I think the advantages still win:

  1. With an email address for login you can have any user name (too short, too long, with spaces and caps you won't have to remember, with special symbols, you name it);

  2. You already have to remember a password for every site, remembering a paired username is really too much to ask;

  3. People should be able to change usernames;

  4. In some cases (for instance, a music bands community) a user could manage more accounts - should he have an extra login for each and any? Should he have an username to manage all of them? Which one? Nobody will ever see it, anyway;

  5. People may want to change usernames.

That said, the solution is using 3rd party authentication services, in particular OpenID: if you're such a hardcore h4X0r not to have an account in any of the supported platforms (google, facebook, twitter, anything) then you probably have your own OpenID server.

3

Just use email address. Screw separation of concerns; I already have way too many user names.

You could do both if you want, but you risk confusing people with non-standard UI if you're not careful. (This is a downside of OpenID.)

Also, don't be an idiot like Gawker and neglect to salt your passwords.

2

Does the site allow social interaction with others who will see the name? If so, let the user chose a username.

Otherwise, use the email address. It will be one less thing for the user to remember.

2

There are situations where either has advantages over the other.

I think let the users take the call here so you should think about including both the options. If the login name is the same as the email then you select an additional check-box/radio-button etc.

Sites like monster allow for login with either the username or email-id. Check their interface out.

0

There are pros and cons on every solution:

using email:

  • Users have to type their possibly longer-than-username mail address for login
  • your mail address is disclosed to by-standers
  • You can never log in again when you change your mailbox or loos access to it
  • Changing the mail adress is not possible or requires much application intelligence (but see the same for username changing in the username section below)
  • You don't have to remember a username
  • You can allow users to choose a display (user) name and change it whenever they want

using a username:

  • Users don't have to guess which of their mail adress they use, assuming many users have several mail accounts
  • Users have to remember a username
  • Users may change their username when the software designer internally uses a GUID or the like as primary key, not the entered username
  • Login is faster (less characters to type)
-1

Most people like to keep the username and email a bit separate, because their email address may contain personal data. Therefore, it's a good idea to allow the user to choose a username.

2
  • 1
    Most sites require email addresses for verification anyway. Otherwise the site is vulnerable to bots. Dec 26 '10 at 9:34
  • I disagree with this up down left right and sideways - but I'm not "most people" so I won't downvote
    – Murph
    Dec 26 '10 at 19:08

This site is temporarily in read only mode and not accepting new answers.

Not the answer you're looking for? Browse other questions tagged .