1 of 47

Login Revamping

User Sign-In Journey

#ft-login-revamp

image here!

Paste,

2 of 47

Outline

Currently, there is no count of unsuccessful logins. A member can try as many number of times to get into the portal without any hard check, which kind of allows a hacker to easily hack the system.

Hence, we need to implement a counter where after maximum number of unsuccessful attempts, the user would be required to reset the password.

3 of 47

Jane Doe, 32

Bio

Goals

Needs

Frustrations

Security Head

Masters in Hacking

Texas, US

“I’m often handling multiple projects at once - time is tight…”

Currently lives in Poland. She finished her master’s in Hacking and is a certified white hat hacker. She performs vulnerability testing of softwares and focuses on getting all the loose ends fixed on time.

To have a secure platform that the members use.
To close all the required loose ends of the platform.
The platform must be GDPR compliant

To implement a solution where there is a check on number of unsuccessful attempts and the platform is secure to use.

A user can enter “N” number of combinations to get into the portal and hack the system.

Personality:

Extrovert
Proactive
Busy

Tech literacy: High

4 of 47

User story

[Jane Doe], [Sr. Security Head]. [35]

Short story from a user’s perspective. E.g.

As a Sr. Security Head, when I’m logging into the portal I want to be prompted on how many unsuccessful login attempts I have so that I can keep in mind about the limited attempts to get into the portal and not hack the system.

5 of 47

Problems

[No count of Unsuccessful Logins]:

[Allowance of permutations and combinations on Password and Email ID]:

The user can try various permutations and combinations of email address and password to get into the portal as there is no check on the fields.

Currently, there is no count of unsuccessful logins. A user can enter and try as many number of times they wish to get into the portal.

6 of 47

Solution/Hypothesis

[Adding Counter on the Login Screen]

We need to add a counter on the login screen, where the user can view that how many login attempts are left if in case they enter wrong email or password.

We are keeping the upper limit as 6 attempts and post that the user needs to reset the password else they will not be able to get into the community platform.

7 of 47

Scope

The scope of the enhancement is limited to the login page on the Member portal side, both new and old flow.

For phase 2, as we’ll be picking up the updating of UI, both the app and web applications will be impacted.

8 of 47

Acceptance criteria

Test that the maximum number of login attempts provided are 6.
Test that if the user enters incorrect email address/password for 1st 2 times, they see the message “Invalid email/password combination ”
Test that if the user enters incorrect email address/password for 3rd/4th/5th/6th time, they see the message “Invalid email/password combination ” �“X Attempts Remaining”
Test that once the user is able to successfully login to the system and on the same day, they try again and then enters incorrect credentials, the counter must start again from 0, i.e the user will get 6 chances again.
Test that after the 6th unsuccessful login attempts, the user sees the message “Looks like you have forgotten your password. Enter your email address below to recover your account OR wait for 24 hours to regain your attempts.
Test that when the user clicks on the Reset Password button, the forgot password functionality gets activated..
Test that once the user has reached maximum login attempts i.e 6 times, the user has to either reset the password or wait for next 24 hours to try again logging in.

9 of 47

[Phase 1]

10 of 47

Screens

11 of 47

Login Screen - Failed Attempts 1&2

12 of 47

Login Screen - Failed Attempt 3

13 of 47

Login Screen - Too many failed attempts

LOGIN PAGE

14 of 47

[Phase 2]

15 of 47

[Old Landing Page]

16 of 47

Landing Screen

LANDING PAGE - When content is too long

17 of 47

Sign-Up Screen

LANDING PAGE- Old Sign Up Flow

18 of 47

Login Screen

LOGIN PAGE - Old Landing Page

19 of 47

Login Screen - Login Error State

LOGIN PAGE - Old Landing Page

20 of 47

Login Screen - With Captcha & SSO Enabled

LOGIN PAGE - Old Landing Page

21 of 47

Login Screen - Error Screen

LOGIN PAGE - Old Landing Page

22 of 47

[New Landing Page]

23 of 47

Sign-Up Screen