"Update Account" TearDown & Changes

redrum

@LaFayette Yeah, that functionality currently is pretty rough. My only comments are:

Might want to call the field "New Password" instead of "Password" just to make it very clear
Might want to consider having a "Confirm Email" field (that seems fairly common for most other accounts that allow email changing)

LaFayette

will it still exist on the login screen?

Yes

why remove the "remember me," button?

It's inclusion was never necessarily by design. There is shared code between the update and create account pages, hence it was brought along by default.

I'm considering this one...
Sure the functionality is related, but is it strictly needed on an update password page? Less is more.
If a user logs in, without this option off, why would they want to turn it on when updating password?
If a user logs in, with the option on, why would they want to turn it off when updating password?

@redrum, good suggestion for new password. I'm hestitant for the double email field. I did some background reading and found it's appreciated where email is super critical, like banking websites, otherwise you tend to get users copy/pasting or abandoning. It seems more effective to confirm the value after it is updated rather than requiring it be double typed. As an interesting datapoint, facebook does not require passwords or email to be double typed.

A lot of readings have recommended to have a 'show password' option and not bother with the double typed password. Some websites even default to having the password be in plaintext to start with an option to 'hide'. Essentially the security gain of someone looking over-your-shoulder while creating account is pretty marginal. I don't want to embark on too many changes just at once, I'll leave adding an email confirmation or updates to the password field for a future iteration.

PS: this was a pretty decent read on password UX: https://conversionxl.com/blog/password-ux/

LaFayette

We should also now have the capability to change username as well. It'll be an iterative process to get there, but in the end the account menu should then contain:

change password
change email
change username

Cernel

@LaFayette Why changing username?

LaFayette

@Cernel Any reason why not? Should you be forced to create a new account if you want to update your username?

There were technical reasons why it was not possible before, so it was not 'originally' included because it was actually difficult to update.

Captain Crunch

hey this reminded me, remember a long time back I noticed my email address was shown on my profile info pop-up window and I was like hey I don't want my email address showing to everyone (who does?) and then someone replied and said only admin can see my email address ... so I'm just saying to make sure you don't show people's email addresses to the public because people don't want that

Cernel

@LaFayette Well, up to the supermods, I guess. I would at very least suggest to disable name changing for users with moderators privileges.

LaFayette

@Cernel Are we on the same page? The 'account' menu is available to all non-anonymous logged in players and impacts only their own account. This is not a moderator tool.

LaFayette

@Cernel if we are indeed both talking about the standard account management tools, why do you suggest moderators be unable to change their own username?

prastle

@LaFayette I actually understand @Cernel 's point. I don't think we want mods changing their names like their "underwear." It would cause confusion and questions. Perhaps mods can have 2 names? One without moderator privledges that they can use on days that they don't want the headache?

redrum

@prastle I think the "mod status" would be tied to their account not the username. So even if they changed their username, it would still show them as a mod.

ubernaut

generally speaking, changing of account names is limited whenever there are stakes involved, whether it's money or rank. Changing your username gives you an advantage over others, who choose not to do that. i think if we are planning to incorporate leaderboards at some point we'd probably want to restrict name changes anyway.

prastle

@redrum Yes I realized that. I was just saying that having new mods every few months might be confusing even if strictly speaking they are the same person

Cernel

Just letting you know I'm personally in favour of the account's username being costant (as it has always been so far).

LaFayette

Mod status would be tied to account and not username.
If someone wants to change their account name, they can create a new account. I'm not sure why we should make it so difficult and say "no, you have to re-register with that same email but a new account name". Is that just not convoluted?
We can certainly discourage mods from changing their names, or changing often. I'm not sure if it's worth the complexity of special casing it into the code when we can keep the same name by convention.
Given the game allows multiple logins, no limit on how many accounts, no validation of email, no password requirement even, it doesn't seem like relieving the requirement of creating a new account if/when a person wants to change their username is a huge deal necessarily. I really view it as a convenience so you don't have to register multiple accounts. Arguably we want that particularly when stats could become tied to a user.