重新输入密码以确认...必要还是过度？
简单的问题...我注意到几个大型网站（Facebook、Twitter 等）已经放弃了要求新注册者通过再次输入新密码来确认新密码的想法。
平衡可用性和防错有效性……是否需要确认更好？
Simple question...I've noticed several large sites (Facebook, Twitter, etc) have ditched the idea of requiring new registrants to confirm their new password by typing it again.
Balancing usability and error-prevention effectiveness...is it better to require confirmation or not?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（5）
我认为这太过分了，这里有一个解决方案来按需显示密码，它提供了如果用户有疑问，可以选择查看密码。它提高了可用性和用户体验。
I think it's excessive and here is a solution to show password on demand which provides an option to view the password if the user is in doubt. It improves usability and user experience.
我认为需要确认。我们可能会无意中输错密码，然后发现很难登录。最好在注册过程中进行一些额外的按键操作，而不是稍后重新设置密码或更糟糕的再次注册。预防胜于治疗。
I believe the confirmation is needed. We can absentmindedly mistype a password and later find it difficult to log in. It is better to put in some extra keystrokes during registration than later going through the whole cycle of resetting password or worse registering again. Prevention is better than cure.
如果您有一个杀手级的、超级易于使用的密码重置系统，那么不，不需要它。如果您的密码重置系统有一些不足之处，请采用确认或类似 @Chandra 建议的解决方案。
If you have a killer, super easy to use password reset system, then no, its not needed. If your password reset system leaves something to be desired, then go with either the confirmation or a solution like @Chandra suggested.
我认为必须重新输入密码是值得的，因为第一次不小心输错密码所带来的痛苦是值得的。如果您使用数字代替字母，那么查看密码可能没有多大帮助。
真正让我烦恼的是必须重新输入电子邮件地址。有多少人不简单地使用复制和粘贴？
I think having to retype passwords is worth the pain of accidentally mistyping it first time. If you use numbers in place of letters then seeing the password may not be that much help.
What really bugs me is having to retype an email address. How many people don't simply use copy and paste?
我想说是的，这是一个有用的功能。
我曾多次输错新密码，我很高兴软件当时发现了它，而不是后来，因为稍后重置或更改密码通常是一个麻烦的过程（相对于当时就通知我密码错误而言） ）。
I would say yes, it is a useful feature.
I've mistyped a new password on multiple occasions, and I'm glad the software caught it then, rather than later, since resetting or changing a password later is generally a cumbersome process (relative to just notifying me right then that it was wrong).