I Forgot My Password Again…

What's the password again?

21% of users forget passwords after two weeks, and 25% forget one password at least once a day.
Christian Holst
co-founder of Baymard Institute

Forgetting passwords is a common frustration that many users encounter in their online interactions. The experience of having to reset a password can be disruptive, time-consuming, and sometimes even lead to abandoning the task at hand. In this post, we will delve into the topic of forgetting passwords and explore ways to mitigate this issue.

Google studied this topic in 2019 and found that 75% of Americans struggle with keeping track of passwords. The level of frustration is up there with traffic jams, spam email, flight delays, and papercuts!

Baymar Institute, an independent research group in Denmark that conducts large scale tests on usability of e-commerce sites reports that passwords are a major problem – but only part of the problem.   According to the research, 51% of people use password choices easy for them to remember, but vendors, banks, financial services require more complicated passwords for security.

So the cat and mouse game ensues.  Businesses battle fraud and customers want to protect their sensitive data from hackers, and in the course of this, users memory is tested, and can’t keep up.

I forgot my password on my mobile device and I'm frustrated

Understanding user's expectations...

They want the steps to be straightforward, quick, and secure.  Most importantly, they want the site to recognize them.

Matthew Mondzelewski
Minds Eye Concepts

Password management can be challenging due to the sheer number of accounts people have.  Despite this, coupled with short-term memory issues, users still expect a seamless and user-friendly process when it comes to recovering or resetting their passwords. They want the steps to be straightforward, quick, and secure.  A well-designed password recovery can go a long way in enhancing the overall user experience, saving time,  and ultimately retaining users. It is essential to understand the user’s perspective and ensure that the process is as painless as possible.

Providing clear instructions, using simple language, and offering support options can help users navigate the process with ease. Visual cues, such as progress indicators or confirmation messages, can also reassure users that they are on the right track, reducing frustration and anxiety.

Moreover, incorporating security measures without compromising usability is crucial. Implementing multi-factor authentication or temporary access codes can enhance security while maintaining a user-friendly experience. Keeping users informed about the security measures in place can also help build trust and confidence.

Apple WWDC24 iOS18 Password App

Apple introduced Keychain, 25 years ago.  Building from this, they recently announced the new ‘Passwords App’ in their IOS-18 update.  It’s designed to make it easy for users to access their passwords, passkeys, Wi-Fi details and verification codes sent via text – highly trusted by their mobile users. The app also includes alerts regarding common weaknesses, such as passwords that are easily guessed or used multiple times and those that appear in known data leaks.   Source: Apple News

How to adopt secure practices while managing multiple accounts?

Despite security risks, 59% of users include easily discoverable personal information in their passwords. 37% of people deal with more than 20 passwords in their personal and work lives.

One of the best practices in password recovery is offering multiple options for resetting passwords. Providing alternative methods, such as email, SMS validation, or security questions, can cater to different user preferences and situations. Allowing users to choose the most convenient option for them can streamline the process and improve user satisfaction.  Today, the industry relies on two-factor authentication, and most of the time it involves the privacy and security of your phone number and the device.

Another important aspect is enabling users to proactively manage their passwords. Browsers and apps offering password managers, and sites that use password strength meters, or reminders can all help users create strong passwords and reduce the likelihood of forgetting them. Educating users on password security and best practices can empower them to take control of their accounts and information.

Regularly reviewing and optimizing the password recovery process is essential to address any pain points or usability issues. Conducting user testing, monitoring feedback, and collecting user behaviors can provide invaluable insights to improving a secure identity match and ensuring a smooth reconnection to their accounts.

The Learning Phase

Amazon has made it easy for customers to purchase products with one click... but recognizing you with one click?  Connecting you safely with all of the information stored about you in an instant is also a key part to their success.

Matthew Mondzelewski
Minds Eye Concepts
In Amazon’s case, they follow a principled approach to privacy.  This includes transparency, customer control, and security, ensuring a trustworthy experience for users.   Users generally understand that in order to combat the inconvenience of resetting a password, they need to teach Amazon about themselves in personal ways.

Some quick stats. According to Security Brief, on average a person uses (or has used) over 100 passwords online. The eCommerce abandonment rate of carts due to resetting issues is 19%. The average time spent resetting passwords on their own is 11 hours. The Independent reported that 20-30% of help desk calls are for password resets alone. No wonder Amazon wants to learn about you – to help connect you quickly and safely.

  • Alexa Voice Assistant: Alexa-enabled devices capture voice interactions inside users’ homes.
  • E-Commerce Marketplace: Amazon tracks user behavior on its online store.
  • Kindle E-Readers: Data is collected from Kindle usage.
  • Audible Audiobooks: Listening habits contribute to personalized recommendations.
  • Video and Music Platforms: User preferences and viewing history.
  • Ring Security Cameras: Capture visitor activity.
  • Home-Security Cameras and Fitness Trackers: Provide additional insights.


What else can be collected to identify the real users?  DNA?  Well not yet. But for now it’s possible to tell if you’re a southpaw or not. Ryan Wilk, vice president of customer success at NuData Security reported they are seeing a lot of adoption in recognizing users with biometrics.  Smartphones are indeed smarter, and have as many as 10 sensors calculating motion, angles, and typing and swiping pressure of the interactions.

They can look at many different data points within the device, everything that the device is making publicly available, so things like pressure on the screen when you're typing, how you swipe, and different angles of how you hold your phone. Do you appear to be right-handed or left-handed?

Ryan Wilk
Nudata Security, a Vancouver firm that helps MasterCard identify online users based on passive biometrics and behavioral analytics
As much as we struggle with personal data breaches, and security, identity recognition, plays a significant role in shaping the overall user experience we have with brand accounts.  It’s the highest level of personalization.

Prioritizing a user-centric approach to password recovery must be weighed against the user’s willingness to share deeper personal connections. If they’re willing, and transparent, it can lead to positive outcomes, better identity recognition, and contribute to a seamless experience.

By understanding user expectations, implementing best practices, and continuously refining and improving the password recovery process, organizations can minimize user frustrations, enhance security, and build trust with their user base.

In today’s Web3, I think we all can agree, trust is priceless.  
©McClatchy Washington Bureau
Minds Eye Concepts, LLC