Jump to content
  • 0

Feature Request: Password field at login


Idea

4 replies to this idea

Recommended Posts

  • 0
  • Level 5*

Hi.  I think this is a security feature - I've seen it on other websites too.  I also use a password client - with Evernote I found any character clicked in the user name box (+ <enter>) will generate the pop-up with both fields; then you can use the password app to fill in both fields in one go.

Link to comment
  • 0
  • Level 5

Not showing the password before a valid user name was entered is a security measure.

It blocks a brute forcing method called "spraying". Spraying means that access is tried with a set of user names, rotating the users and the passwords. By not using the same user name again and again the usual brute forcing prevention is not working.

The small delay between entering the user name and uncloaking the password field effectively blocks this hacking method.

For me the delay it maybe a second, never more. I appreciate that EN changed this login concept to protect my (and all other users) content stored on the EN server.

True 2FA should be enabled in addition by the user.

  • Like 2
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...