Head Tale

It's a short list but it cuts to the core with a list of the essential things that are part of successful online usability.

1.  Make Them Log-In By Account Number
This is a huge one for libraries.  How many libraries have databases and other electronic resources but require patrons to memorize a lengthy barcode or dig in their wallets/purses for their library card everytime they want to log-in?  Then we wonder why Google gets all the attention and no one uses our expensive paid resources?

2. Enforce Complex Password Requirements
This was something I hated at UWO and which also kept me from setting up a MySpace account until long after that site had jumped the shark (which was probably a good thing in retrospect.)  But yeah, if a person wants to make their password their middle name or their pet's name, more power to them.  If you have fears that a password being compromised will possibly compromise your entire system, you've got bigger problems on your back end than whether somebody wants to use “Snoopy” as their password. 

3. Make Them Confirm Their E-mail Address To Register
I think the reason sites do this is to confirm that somebody is a real person as opposed to a spambot.  But as with the last point, offloading your security  requirements to your users is bad policy that makes for a bad user experience. 

4. Make Them Opt Out of Being Spammed
On top of some sites “helpfully” checking the box for “send me offers from third-party vendors”, I hate that you have to read the fine print with a microscope to know if the site requires you to check the box to get out of being spammed, uncheck the box to get out of being spammed, check the box to receive the offers or uncheck the box to receive the offers.  I'm surprised they don't alternate the boxes from page to page (wait, don't tell them I said that! )

[Edit: I noticed that someone in the comments added “#5 – Don't make the user change their password in a greater frequency than they use the site.”  This is a personal pet peeve of mine.   We have to change our Dynix password at work on a monthly basis which is a pain but okay, fine.  I'm on there everyday.  But I bet the easiest way to find all the personal information on anybody in our library system is to break into one of our branch libraries – which are all in small towns and few with an alarm system – and look under the mouse pad or in the top left drawer since the librarians are all changing their passwords so frequently when they're only open a couple days a week – that I'm fairly certain they write the passwords down to keep track of them and also so others with access to the system – assistants and occasionally board members – can also log-in.  It's beyond obvious to point out that any password system that encourages people to write down their passwords defeats the purpose of having passwords!]