(This is a personal presentation and reflects my own views, not those of my employer. It doesn't contain recommendations, but ideas I think are worth exploring - your users, data, compliance requirements, and needs will differ) During 2016 I talked at UX Nottingham, NUX Liverpool, and the UCD16 conference in London. I made the case that security and good, frictionless user experiences do not need to be in opposition - but by thinking about how humans work (and their desire to be safe) we can make systems and environments that are both safer and more pleasurable to use.

1. Security vs UX
Deathmatch
@ccollingridge
@Avecto
@nuxuk

3. Security is human
We’re not making good design decisions
We can do better

4. Security is human
We’re not making good design decisions
We can do better

5. Kamyar Adl

6. Troy Tolley

7. Mike Photo Art

8. Jenn Durfey

9. Chaoyue 超越 PAN 潘

10. Key Multimedia

11. Surian Soosay

12. Jon Duhig

14. Alexandra Bolzer

16. Security is human
We’re not making good design decisions
We can do better

17. Steve Way

18. Overloading memory

20. Jason Kottke

21. XKCD

24. Nihilistic password security questions (by Soheil Rezayazdi)
What is the name of your least favorite child?
In what year did you abandon your dreams?
What is the maiden name of your father’s mistress?
At what age did your childhood pet run away?
In what city did you first experience ennui?
What is your ex-wife’s newest last name?
What sports team do you fetishize to avoid meaningful discussion with others?
What is the name of your favorite canceled TV show?
What was the middle name of your first rebound?
On what street did you lose your childlike sense of wonder?

25. Technically driven barriers

26. Troy Hunt

29. Relying on users making good decisions

30. Alec Meer

31. Amanda French

32. MyOnlineSecurity

33. Not promoting good practice

43. Security is human
We’re not making good design decisions
We can do better

44. Best Car Mag

47. Bill Boaden

51. @Elgarfrombeyond

52. Encourage
two-factor

56. Stand on the
shoulders of giants

57. Start thinking about biometrics

58. Encourage passphrases

59. Password-less login

60. “Regular password changing harms rather than improves
security, so avoid placing this burden on users. However,
users must change their passwords on indication or
suspicion of compromise.”

61. Use honeypots
& throttling
Ram Joshi

62. Don’t break
password managers

63. Set safe
defaults; be
proactive

64. Create secure-by-design places

65. Security is not an inconvenience, but a human need
Good security serves your user, your organisation,
and the wider world
You can design for better security and less friction

66. Joachim S. Müller
Security vs UX
Deathmatch
Romance
Be the love you want to feel
@ccollingridge
@Avecto
@nuxuk