MFA prompts in Windows

[Metanis]

This is just an annoyance that has finally exceeded my patience limit.

If you're a developer and you require an MFA response in a web interface, for the love of God put the focus on the field where you expect the input!!!

How many times have I began to type the 6 digit number only to discover the focus wasn't yet on that field!!!

ID.Me is a prime example and one I have to use frequently for VA, IRS, and Pay.Gov access, yet it never grabs the focus. I know it's possible because my credit union has no problem doing it every single time!

/rant off

 

[frase]

Nothing worse though than ghost typing credit card details.

 

[HCHTech]

....or the password prompts with no "reveal" icon. You give in and make complicated passwords to be secure, then they take away your ability to see if you typed the damned thing right! Most stuff is in our documentation system so we can copy/paste, but not everything, of course - or I'm on a machine without access and I have to read it from my phone. Or the developer decided to block the "paste" function! One of my most hated things about today's security environment.

And don't get me started on those picture CAPTCHAs. "Click all the squares containing road signs" - and there is always one square with just the barest corner of the sign. Should I click that one or not?!? I had one feed me what must have been 8 different "click the square" selections the other day because I couldn't (apparently) get it right. I finally gave up and just tried again later. I'm hoping it was just a problem on their end because I *think* I know what a motorcycle or a school bus or a sidewalk looks like.....but that process made me question myself!

 

[YeOldeStonecat]

And don't get me started on those picture CAPTCHAs. "Click all the squares containing road signs" - and there is always one square with just the barest corner of the sign.

Oh those drive me nuts. Gets the curses flowing out of my mouth! Crosswalks, school buses, stoplights, ...

 

[Sky-Knight]

CAPTCHA is just a rate limiter to hold back brute force attacks...

Microsoft uses them too, but only after several failed attempts so you don't see them UNLESS you're doing something stupid. Which should be the standard.

 

[frase]

And don't get me started on those picture CAPTCHAs. "Click all the squares containing road signs" - and there is always one square with just the barest corner of the sign. Should I click that one or not?!? I had one feed me what must have been 8 different "click the square" selections the other day because I couldn't (apparently) get it right. I finally gave up and just tried again later. I'm hoping it was just a problem on their end because I *think* I know what a motorcycle or a school bus or a sidewalk looks like.....but that process made me question myself!

The Microsoft ones are the worst EVER! Stupid images one cannot define then rotate on a certain angle to match..I am a robot done beep boop.