Hacker News new | ask | show | jobs
by Wronnay 715 days ago
Your app will be held back by requiring to create an account with email and password.

Most of the users just use "Login with Google" or other well known OAuth providers and also want to try the product before creating an account.

When I switched from user / password to OAuth I couldn't believe how many users choose it. I could deactivate traditional user & password login and nobody would notice it.

2 comments

That's fascinating! I mostly don't use "sign in with X" anymore since my password manager flow is pretty fluid at this point (so making a password is easy and secure). I guess for the many people who are less comfortable with password managers, a 1-click sign up/in is very useful.

Thanks for sharing!

I'll add my 2c, and say that even with a really fluid password manager flow, "signin with X" is usually a 1-click entry (possibly 2 for scope authorization), rather than a signup form + leaving the site to click through an email verification.

I'd much prefer 1password to do it's "you last signed in with github here" popup, than just have easy new passwords created.

Having a password manager plug-in thing installed on every web browser that I might use seems pretty arduous to me (not to mention I also then have to trust the plug-in). The fact that LastPass for example had a major breach doesn't help either.
To each their own I guess… I find it insanely easy to install the bitwarden plugin. All the plugins sync through my Mozilla account anyway. Definitely do not use Lastpass.
Why do you say "most users just use google" to login? What is this based on?
My own experience, but also what I heard from others.

Here is e.g. a poll where the majority also voted for Google Login: https://twitter.com/Hi_Fabienne/status/1790393552268132742

So it seems to be based on their own experience. The parent comment says this:

"When I switched from user / password to OAuth I couldn't believe how many users choose it. I could deactivate traditional user & password login and nobody would notice it."

Based on the paragraph following the part you quote, it sounds like it's based on what they've seen in their own app.