Reading Time – < 1 minuteIf you’re designing a user verification or validation flow, you might have asked yourself what the best approach is when it comes to confirming user’s email address: sending an email confirmation link, sending a verification…
Reading Time – 2 minUpdated August 2026. NIST’s current password guidance (SP 800-63B) says to accept all printable ASCII and Unicode characters, including spaces, and not to impose composition rules such as “at least one symbol”. The advice below to…
Reading Time – 3 minLong story short, “Log In / Sign Up” works better. You are probably here because you are a designer or a developer having a debate on whether to use ‘sign in/sign up’ or ‘login/register’ or any…
Reading Time – 2 minWe often come across websites or apps that ask users to enter their password twice or to confirm their password. Experts suggest not to ask users to retype their password. Instead, we should ask for it…