Password to make forum account is visible

StriderStone

New member
Whenever you are in the game and you want to make an account to join the forum, the screen will automatically make a password for you.

In this process the password will show up in plain text, so that if you are streaming, any viewer might/will be able to sign in to your forum account, change the password, post all sorts of stuff, etc.

Is there a way to make this hidden by default? There is already a "Copy" button next to it and it's not a "Memorable Password" so having it shown isn't necessarily something that SHOULD be done in my experience.

(I already changed my password and have a Yubikey, the email is a brand email so I don't care if it's showing, and I assume my username is shown on this post so I only blocked out the old password, I don't even know if that was necessary)
 

Attachments

  • Pasted image 20240831152005.png
    Pasted image 20240831152005.png
    1.7 MB · Views: 14
It is quite easy to just not click on it, but I do agree that there should be an option to remove it from the main menu.
 
It is quite easy to just not click on it, but I do agree that there should be an option to remove it from the main menu.
One thing to note is that it isn't clear that this would show the password at all before you get to the screen in the screenshot above.

From the flow and the way you enter an email before you get to this screen, it seems more like a traditional invite flow where you would:

- you enter your email;
- you press link in email that would open link to forum with either key as part of link query params or in the email separately to be entered into a form;
- you make the account off-game in the forum directly.

Instead, it does what OP describes.

From a new user perspective, the solution of "not click on it" ends up being the "hardest" solution due to them not having the requisite knowledge because they're new and because the flow is misleading compared to the more traditional ways this flow is achieved.

This does point out another potential solution here, though: a warning that your password will be shown on the next screen added to the copy of the previous screen. Compared to the functional change of adding password masking to the client, might be easier to achieve.

Admittedly, as the OP pointed out, this really only affects streamers and is only a concern for the pre-release period of the game.
 
One thing to note is that it isn't clear that this would show the password at all before you get to the screen in the screenshot above.

From the flow and the way you enter an email before you get to this screen, it seems more like a traditional invite flow where you would:

- you enter your email;
- you press link in email that would open link to forum with either key as part of link query params or in the email separately to be entered into a form;
- you make the account off-game in the forum directly.

Instead, it does what OP describes.

From a new user perspective, the solution of "not click on it" ends up being the "hardest" solution due to them not having the requisite knowledge because they're new and because the flow is misleading compared to the more traditional ways this flow is achieved.

This does point out another potential solution here, though: a warning that your password will be shown on the next screen added to the copy of the previous screen. Compared to the functional change of adding password masking to the client, might be easier to achieve.

Admittedly, as the OP pointed out, this really only affects streamers and is only a concern for the pre-release period of the game.
Those are good points. Some sort of warning post-click that tells you it will show your login information would be beneficial.

Slightly related, I find it odd that it tells you the forum login information without giving you the forum url. I had to google it just to find out where to participate lol.
 
Those are good points. Some sort of warning post-click that tells you it will show your login information would be beneficial.

Slightly related, I find it odd that it tells you the forum login information without giving you the forum url. I had to google it just to find out where to participate lol.
Good point, I also had that same issue. There's a workaround in the scroll, but I imagine no one would know that it's in there, might be missing some feedback because of it.
 
Back
Top