visually clearly distinguish username from password entry

Bug #231033 reported by Tomas Pospisek on 2008-05-16
6
Affects Status Importance Assigned to Milestone
ubuntu-gdm-themes (Ubuntu)
Low
Unassigned

Bug Description

Binary package hint: gdm

On various occasions one get's to see the login/password promt screen.

The problem is, that sometimes it's the passord only (unlock screen/computer) and sometimes it's username/password.

Due to lack of attention/stress it happened numerous times to me that - due to the identical appearance of the login and the password entry screen - I started typing in the password into the username field ... and only stopped 2/3 through the password, which of course was visible, since it was entered into the login screen. My fully automatic subconscience was assuming that it was on the password entry screen, which was evidently false.

Last time this happened in front of a public on a presentation screen ... might as well give free accounts and access to my data to everybody that was present then.

So I suggest to make the username and the password screens optically very evident. It must be totally clear where you are on a subconscient level. Suggestions would be:

- brown background for username, red background for password
- big key icon on password entry screen
- ... ?

or similar.

Note that this is a usability security issue!
*t

Sebastien Bacher (seb128) wrote :

Thanks for the bug report. This particular bug has already been reported, but feel free to report any other bugs you find.

Changed in gdm:
importance: Undecided → Low
status: New → Invalid
Tomas Pospisek (tpo-deb) wrote :

Please do add a pointer to the (in the boilerpate text mentioned) duplicate bug.

Changed in ubuntu-gdm-themes:
status: Invalid → New
Dan Andreșan (danyer) wrote :

I don't see the duplicated bug. Could you give us the bug ID?

thanks.

schrodycat (junk-jimandbarb) wrote :

Adding another vote for revisiting the gdm username/password login prompts, especially when a face browser is present. This is actually a minor security issue - I have accidentally typed my password into the username field in front of groups of people. Not a nice experience.

Take a look at the Mac OSX login screen. There's a face browser, but no username field. You simply click on a face and enter your password. Users can't accidentally enter their password in a cleartext field. If you want to login as a user who is not in the face list, there's a separate item for that.

And if this is really a dup, please add the bug ID.

thanks.

Tomas Pospisek (tpo-deb) on 2013-02-15
summary: - optically clearly distinguish username from password entry
+ visually clearly distinguish username from password entry
Changed in ubuntu-gdm-themes (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers