Account Management Screens, Done Properly
The screens where people manage their profile, security settings, connected services and data.
Priya Raghunathan
What is at stake
Account screens carry privacy and security consequences, and they are where users go when something is wrong.
The playbook
- Group settings by purpose
- Confirm sensitive changes by email
- Show active sessions and devices
- Provide data export and deletion routes
- Explain what each setting does
Where it goes wrong
Avoid:
- Silent email or password changes
- Settings with unexplained effects
- No way to revoke third-party access
- Deletion hidden behind support requests
The numbers behind it
| Measure | Figure |
|---|---|
| Security actions | password and email changes need confirmation |
| Sessions | users benefit from seeing active sessions |
| Data access | privacy laws give rights to access and delete data |
| Connected apps | third-party access should be reviewable |
Getting outside help
When to hand it over: Bring in help when products hold personal data.
Where this comes from
- California Privacy Protection Agency — CCPA regulations
- OWASP — Session Management Cheat Sheet
The figures and practices above come from the sources listed.
Working on something like this?
We take on UI & UX Design work for teams who want it done once, properly. Tell us what you are building and we will tell you honestly whether we are the right studio for it. Start a project.
Where to go next
Spotted something wrong? Report an error on this page. We correct on the page and say what changed.
