Page MenuHomePhabricator
Create Task
Maniphest T405870

Inconsistencies in layout etc in WebAuthn vs TOTP enabling
Open, Needs TriagePublic
Actions

Description

While reviewing the patches for T232336: Separate recovery codes into a separate 2FA module, flagging various UI differences between WebAuthn and TOTP

Screenshot 2025-09-29 at 08.57.04.png (383×2 px, 63 KB)

"Add key" is far over on the right hand side (much more visible on a wider screen), and before the (important) recovery codes, which doesn't feel logical in flow, in contrast to TOTP below. Yeah, WebAuthn has an extra step on the next page (I wonder if we can remove that at some point? I guess I should file a task about that)

Also that TOTP has boxes around "steps", and headers providing different information. The processes appearing completely differently does not provide a consistent feel or experience between the two forms

Screenshot 2025-09-29 at 08.57.26.png (1×1 px, 166 KB)

Related Objects
Search...

Event Timeline

Reedy created this task.Sep 29 2025, 8:02 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 29 2025, 8:02 AM
Reedy mentioned this in T405871: Remove extra step/page when enabling WebAuthn.Sep 29 2025, 8:04 AM
Catrope moved this task from Backlog to Consider for future work on the FY2025-26 WE4.6.2 Multiple Authenticators board.Sep 29 2025, 5:28 PM
AAlhazwani-WMF subscribed.Sep 30 2025, 9:40 AM

adding some design notes for context... while working on WE4.6.2, we've opted for reusing the existing designs and flows for current features (e.g., TOTP or security keys), and designing new things only for missing features. agreeing with roan that we might consider revising these flows in the future to make them feel more cohesive.

Catrope edited projects, added FY2025-26 WE 4.6 - Account Security (WE 4.6.4 - 2FA improvements and passkey support); removed FY2025-26 WE4.6.2 Multiple Authenticators.Oct 2 2025, 4:13 AM
Catrope moved this task from Inbox to UX cleanup on the FY2025-26 WE 4.6 - Account Security (WE 4.6.4 - 2FA improvements and passkey support) board.Oct 2 2025, 6:17 PM
Reedy moved this task from Backlog to Bugs on the MediaWiki-extensions-OATHAuth board.Oct 3 2025, 11:32 AM
Catrope subscribed.Oct 3 2025, 7:41 PM

New design from @AAlhazwani-WMF :

image.png (551×375 px, 33 KB)

Reedy moved this task from Bugs to User Experience on the MediaWiki-extensions-OATHAuth board.Oct 11 2025, 3:59 PM
Catrope added a comment.Oct 22 2025, 4:48 AM

As part of this we should also fix T406842

Catrope added a parent task: T406842: When registering new WebAuthn security key, the name input has incorrect label.Oct 22 2025, 4:48 AM
AAlhazwani-WMF unsubscribed.Oct 22 2025, 8:02 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits