Risk and opportunity for password-free login sites

There are always a number of reasons to register a Web site, and there is only one source: a link for sustainable tracking. such as publishing content, add friends or online transactions. In addition, whether it is to read, or as a guest message, we all prefer not to register not to register, all seek Jane. To minimize the hassle of registering with users, the threshold for registration is now "deteriorating": just fill in the email and password. More websites even send a random password to email (because sooner or later you're going to have to go to the mailbox to verify the activation).

But can we go any further and simply omit the password when registering/logging in to find a better experience?

Why not the password?

Because the password is too troublesome to log in.

It seems like the first thing we do on the Internet is to enter a username and password. After the user name is gradually unified to the email, a little convenient. However, there are still some old stubborn websites, such as Baidu, do not support email login, so that our username can not be repeated, harsh, and can not be changed later.

Often forget is not the password, but the user name

In any case, passwords are always inconvenient to enter, such as:

1, different levels of account passwords, such as online banking, social networking sites and temporary registration of small sites;

2, the password is not clear text, easy to knock wrong;

3, easy to forget;

3. Fear of being stolen when entering a password.

Implementation scenarios

1, the use of IP address and Computer Configuration

Computers on the Internet will have a URL (IP address) that we can use to determine the unique identity of the viewer. For those who use static IP fixed internet users, you can register an IP address on the site, as long as it is on this IP login email, do not need a password.

Users who use a public IP, or a dynamic IP, such as routers, encode the computer configuration (Hardware and operating system) for storage. Whenever this computer is online, and the IP address in the same city users, password-free login.

2, through the browser cache

Like most Web sites today, you can tick the "Remember me, two-month automatic login" approach when you log in. This method is too common to unfold.

3. Use password

Users are not convenient to use this way, such as temporary to the library, Internet cafes and other public places, use the password to log in.

Feasibility analysis

Is it convenient

Convenience is our purpose. If the record is also constantly entered the code, or always to the mailbox to verify the message ... Rather than being harassed, it's better to enter a password.

Registration process

Login process

is safe

As with other websites, protecting user account security is a fundamental obligation of the website. At present, can be gatekeeper:

Security level

Applicable occasions

In addition to content that is publicly available, such as social networking sites, others are generally unsuitable:

1. Involving State secrets

2. Public Accounts

3. Involving personal property or privacy

Puzzle Solution

1, other people use my computer, then the account is not safe?

The first is not someone else, because you will not allow "others" to use your personal computer. Usually classmates, colleagues, family or friends. They have a higher degree of reliability.

Second, assuming they use your computer temporarily, your Chat tool will not be closed, the browser's account cache is not empty, and the risk is the same.

2, the use of Friends of the computer, how can I log in?

Log out of a friend's account, and then refer to the "Login process-Public computer".

3, the bad guys know my email, intentionally destroy my reputation, or peep my privacy.

Unless the "bad guy" is around you and can touch your computer. Guzei is one thing, your making friends carelessly is another matter.

Websites that involve personal privacy (such as personal diaries, books) do not recommend this approach. Of course, if you sign up with your bank account password in an unknown small forum, you're not a problem.

There are already cases

Facebook

First login Facebook requires "register Computer"

Login settings (free of interruption)

QQ

QQ Security Center: Login Protection

Global Avatar (Gravatar)

In a supported community (such as WordPress), the user is not logged in, and is directly identified by email to the reviewer's personality avatar. Its registration is simple:

Register Gravatar

Prospect

With the development of technology and community, we certainly prefer a simpler way of logging in.

1. Uniform username and password. Like the presence of OpenID now.

2, human eyes (face) recognition. A randomly equipped high-definition camera can be easily completed.

3, fingerprint login. Notebook, such as touch screen is the only function.

There is no safest thing in the world. In order to get into a classified building, the thing that cut off the hand is not no (though I've only seen it in movies).

We pursue a more advanced experience, why not?

Article Source: http://cuikai-wh.com/archives/374