Take the 2-minute tour ×
Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. It's 100% free, no registration required.

Is registration login using email a better idea than username to identify the user?

share|improve this question
3  
Perhaps this fits better on ui.stackexchange.com, where I have asked it before: ui.stackexchange.com/questions/720/… –  Erik Romijn Dec 26 '10 at 8:45
1  
Perhaps you could expand on your question... Better from a user's stand point? from a security stand point? ease of coding? Better how? –  Walter Dec 26 '10 at 14:04
    
A fair number of apps will allow login via "email or username", which comes in handy fairly often for someone like me, who has at least a half dozen email addresses and roughly a half-dozen usernames I regularly use, and I can't seem to remember exactly which one I use on any given site. –  JasonTrue Jun 4 '11 at 17:14
    
Use OpenId, mate. –  Job Jun 4 '11 at 18:55

10 Answers 10

up vote 11 down vote accepted

Login name.

  1. Email address was never meant to be a means of identification, but a means of communication

  2. If a user is logging in before somebody's eyes, then their email address will be revealed which is quite bad. If a login name is revealed, it's not a big deal.

  3. Do not automatically turn the login name into a public display name. They're two completely different things. Let the user specify the display name separately. Bonus points, let the user freely edit both the login name and a display name later.

share|improve this answer
    
Unless the person uses the same login for more things than email. –  Rei Miyasaka Dec 26 '10 at 9:03
2  
+1 for separating login name and display name. More login systems (if not all of them) should do that. –  Jonathan Hobbs Dec 26 '10 at 17:21
2  
That's a non sense. The basic principle of login is telling who you are. The password is here to proves it. If the login is secret, this is now the password. –  deadalnix Jun 4 '11 at 18:07
1  
even worse. Email addresses are more prone to change than other ids. This can cause serious trouble. Say you use your company email address as a login somewhere, then change jobs. –  jwenting Jun 4 '11 at 19:02
1  
"That's a non sense. The basic principle of login is telling who you are." email address doesn't say who you are, only where you can be reached at a specific moment in time. I've worked for companies that recycled them (and the network names associated with them)... –  jwenting Jun 4 '11 at 19:03

Consider OpenID. But if you don't want to use that, the plus for user name is that it isn't linked to a specific email. The plus for email is they won't have to remember what they used for a user name.

share|improve this answer
4  
Please, please, please. The fewer authentification tokens the better. –  user1249 Dec 26 '10 at 10:26
2  
OpenID's the safest way to do login, but honestly, I don't like the UI. When I sign up for OpenID it feels like you're signing up for two services, and then when you log in it feels like a two-step process because you have to type your password in on a separate page. –  Rei Miyasaka Dec 26 '10 at 16:31
    
@Rei I agree, don't love the OpenID... yet. I hope it will get better over time. Rob Conery's blog (blog.wekeroad.com/thoughts/open-id-is-a-party-that-happened) is worth reading on this as a reason to have more than just OpenID as a log in right now. It sounds like the standard is still being set, I still think they'll figure it out and have hope for it. –  Beth Whitezel Dec 27 '10 at 3:42

I think you should allow both user name and email for login (I think this is the system they have with disqus), of course you should only display user name to others as pointed out by Matthew.

Added. Or you can go for OpenID (highly recommended), which is emerging as a sort of internet driver's license.

share|improve this answer

Email definitely. Look, users already have it bad enough with a bajillion user/pass to remember for other sites. Most sites do use the Email Address for the username, so just go with that and make your users life easier...

OpenID ftw... if your willing to invest time to get it setup, I think there is $$ involved to but I could be wrong?

share|improve this answer

Does the site allow social interaction with others who will see the name? If so, let the user chose a username.

Otherwise, use the email address. It will be one less thing for the user to remember.

share|improve this answer

There are situations where either has advantages over the other.

I think let the users take the call here so you should think about including both the options. If the login name is the same as the email then you select an additional check-box/radio-button etc.

Sites like monster allow for login with either the username or email-id. Check their interface out.

share|improve this answer

There are several reasons to prefer username over email (it would be an abuse of the concept of email, a bystander could read your address - not that I would care the slightest, but some could) etc, but I think the advantages still win:

  1. With an email address for login you can have any user name (too short, too long, with spaces and caps you won't have to remember, with special symbols, you name it);

  2. You already have to remember a password for every site, remembering a paired username is really too much to ask;

  3. People should be able to change usernames;

  4. In some cases (for instance, a music bands community) a user could manage more accounts - should he have an extra login for each and any? Should he have an username to manage all of them? Which one? Nobody will ever see it, anyway;

  5. People may want to change usernames.

That said, the solution is using 3rd party authentication services, in particular OpenID: if you're such a hardcore h4X0r not to have an account in any of the supported platforms (google, facebook, twitter, anything) then you probably have your own OpenID server.

share|improve this answer

Just use email address. Screw separation of concerns; I already have way too many user names.

You could do both if you want, but you risk confusing people with non-standard UI if you're not careful. (This is a downside of OpenID.)

Also, don't be an idiot like Gawker and neglect to salt your passwords.

share|improve this answer

Most people like to keep the username and email a bit separate, because their email address may contain personal data. Therefore, it's a good idea to allow the user to choose a username.

share|improve this answer
    
Most sites require email addresses for verification anyway. Otherwise the site is vulnerable to bots. –  Rei Miyasaka Dec 26 '10 at 9:34
    
I disagree with this up down left right and sideways - but I'm not "most people" so I won't downvote –  Murph Dec 26 '10 at 19:08

There are pros and cons on every solution:

using email:

  • Users have to type their possibly longer-than-username mail address for login
  • your mail address is disclosed to by-standers
  • You can never log in again when you change your mailbox or loos access to it
  • Changing the mail adress is not possible or requires much application intelligence (but see the same for username changing in the username section below)
  • You don't have to remember a username
  • You can allow users to choose a display (user) name and change it whenever they want

using a username:

  • Users don't have to guess which of their mail adress they use, assuming many users have several mail accounts
  • Users have to remember a username
  • Users may change their username when the software designer internally uses a GUID or the like as primary key, not the entered username
  • Login is faster (less characters to type)
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.