Asking for Usernames and Passwords on the Web
http://www.stc.org/confproceed/2002/PDFs/STC49-00003.pdf

Miller, Sarah and Caroline Jarrett
STC Proceedings
2002

Abstract:

The Web has moved beyond purely open content available to all. We now want to use it to collect and provide information that we want to restrict in some way – to members, or to staff, or because it is sensitive or personal data. One common method of restricting access is to ask users to enter username and password. Even this simple combination can be a source of annoyance and frustration to users but it does not have to be. This paper compares options for setting up and maintaining usernames and passwords, and also shows how to design a screen so that users are guided easily to the correct choices.