Page MenuHomePhabricator

Tell users to use a unique password when creating an account and changing their password
Open, LowPublic

Description

On https://meta.wikimedia.org/wiki/Special:MyLanguage/Requests_for_comment/Password_policy_for_users_with_certain_advanced_permissions it was suggested by User:°, that the instructions for creating an account/changing password, should instruct users to use a unique password, and not share across multiple websites.

Event Timeline

Bawolff created this task.Dec 22 2015, 11:42 AM
Bawolff raised the priority of this task from to Low.
Bawolff updated the task description. (Show Details)
Bawolff added a project: Security-Team.
Bawolff added subscribers: Aklapper, Bawolff, StudiesWorld.
Reedy added a subscriber: Reedy.Oct 31 2016, 4:06 PM

Do we class this as a design issue?

Reedy renamed this task from Tell users to use a unique password when creating an account. to Tell users to use a unique password when creating an account.Oct 21 2019, 7:02 PM
Apap04 claimed this task.Dec 6 2019, 4:47 AM
Apap04 added a subscriber: Apap04.

I'll give this a try..

Change 555012 had a related patch set uploaded (by Apap04; owner: Apap04):
[mediawiki/core@master] wip

https://gerrit.wikimedia.org/r/555012

Change 555012 abandoned by Apap04:
wip

Reason:
Bad branch, need to make new one.

https://gerrit.wikimedia.org/r/555012

Change 555601 had a related patch set uploaded (by Apap04; owner: Apap04):
[mediawiki/core@master] signup: added help message for security

https://gerrit.wikimedia.org/r/555601

Apap04 added a comment.Dec 7 2019, 5:26 AM

Does this look fine? Tell me if the wording should be different.

Reedy renamed this task from Tell users to use a unique password when creating an account to Tell users to use a unique password when creating an account and changing their password.Dec 8 2019, 6:07 PM

With pwordbr:

Without pwordbr:

Apap04 added a comment.EditedDec 12 2019, 12:17 AM

help-message from HTMLForm could be modified in a different patch so a bit of spacing is given at the bottom?

So in order to make this really useful, it should be a label element with a for attr in order for screen reader users to be clearly connected to the element.
See for example https://doc.wikimedia.org/oojs-ui/master/demos/?page=layouts&theme=wikimediaui&direction=ltr&platform=desktop#FieldLayout-aligned-top-with-inlined-help

This is also the correct styling of additional, secondary labels. Note the white-space connecting it visually to the first and related password input and not to the second.

Krinkle removed a subscriber: Krinkle.Feb 13 2020, 10:12 PM

Change 555601 merged by jenkins-bot:
[mediawiki/core@master] signup: added help message for security

https://gerrit.wikimedia.org/r/555601