I need to load a second page to enter my password in some sites. Why is this? I even have a site I use that has the username, password and 2FA entries on separate pages that each need to be loaded one after the other.

My uneducated guess is that it makes it harder for bots, but I can’t imagine it being that much of an impedance 🤷‍

Cheers!

  • faltryka@lemmy.world
    59·
    10 months ago

    This is called an identity first workflow and is used specifically so that they can route different people to different login ceremonies or providers.

    They get your id first, and use that id to determine what your login ceremony is. Perhaps you’re with a business that they have an sso integration with and will send you on to your businesses sso provider, or perhaps you’re a local user for them and get a password screen next.

  • mspencer712@programming.dev
    25·
    10 months ago

    Different domains need different authentication flows. If the provided email ends in a domain they recognize, instead of prompting for a password you’d be sent to another auth provider to authenticate there.

  • just_another_person@lemmy.world
    72·
    10 months ago

    Sometimes it’s just UI/UX, sometimes it’s to deter specific patterns they’ve seen from bots, users, or brute-force. It’s really just subjective. One isn’t necessarily better than the others though it does mess with automated input of credentials a lot of times.

  • paraphrand@lemmy.worldEnglish
    2·
    10 months ago

    I always assumed some sites harvest what ever you enter in the first box. Especially if it’s an email address. But other people in this thread have the legitimate answer.