Usability vs. Security - Smart Interface Design Patterns (Smashing TV)

A sneak preview from "Smart Interface Design Patterns" (smart-interface-design-patter...), a 9h-video course on interface design and UX with Vitaly Friedman.
How can we make authentication and password recovery slightly more obvious and slightly less frustrating? In this session, we’ll look into authentication UX, design patterns around login/password, 2FA, magic sign-in as well as just the right timing to speed up and simplify authentication.
0:00 "Why is authentication UX difficult?"
1:10 "Complex password requirements"
2:17 "Good authentication is invisible"
3:23 "Usability trumps security"
6:39 "Security questions"
7:54 "CAPTCHAs"
9:18 "Spam prevention strategy"
10:58 "State of Security UX"
"Smart Interface Design Patterns" (9h-video course + live UX training)
smart-interface-design-patter...

[@john6114]

Great topic! Regarding the point about the randomization at the 4:33 mark, its purpose isn't to stop brute force attacks. Instead, it's designed to stop people from memorizing the pattern you enter. However, I agree with the point that making the process too difficult for users can lead them to find workarounds to simplify usage, such as shortening their passwords or disabling the access code altogether.

[@greendzine]

Who is image on your shirt? Reminds me of Nenad Bach musician?