How about asking for even less (i.e. not even a password)?

Since this is a SIGN UP (for free trial process and not a SIGN IN
process , why don't you just ask for e-mail address and send them a
confirmation email with a system generated password and a link to the
SIGN IN page. User can save the email for future reference. I have seen
this happen before and have come to accept it because of it being a
'free' trial.

If the user looses the email, they could visit the SIGN UP page and
re-enter the email address to receive another email with a new password.
Hopefully, the system will recognize that it was the same email address
(same user) if within the trial period and recover user specific
data/settings already stored in the web app.

Aras Kannu
Principal UI Architect, Infor Global Solutions

-----Original Message-----
From: ACM SIGCHI WWW Human Factors (Open Discussion)
[mailto:[log in to unmask]] On Behalf Of Hal Shubin
Sent: Tuesday, October 14, 2008 3:40 PM
To: [log in to unmask]
Subject: Password recovery

When you want people to sign up for a free trial of a Web 
application, you want the signup process to be as quick as possible. 
Email address and password (plus password confirmation) seems the be 
the least amount of information.

But, what happens when that user has to recover her password? Because 
the signup didn't ask for any sort of security information, how can 
we verify that it's the right user? We need some other information, 
but that makes signup longer.

This seems trivial (just ask for the customer's first pet's 
elementary school principal's favorite color), but I'm sure the 
Marketing folks will balk when I suggest adding to the nice, short 
signup process.

I thought of the explanation Staples.com gave when they started 
asking for ZIP/Postal codes before showing products: we can serve you 
better if we know where you live, and know what stores and products 
are nearby (or something like that, and they don't seem to do it 
anymore). If we do ask for a security token, explaining the purpose 
might make it seem like a *good* thing to prospective customers.

Any thoughts or experience with this?

thanks				-- hs

. . . . . . . . . . . . . . . . . . . . . .
Hal Shubin
Interaction Design, Inc.
617 489 6595
www.user.com

    --------------------------------------------------------------
    Tip of the Day: Use the archives to research common questions
     CHI-WEB: www.sigchi.org/web POSTINGS: mailto:[log in to unmask]
              MODERATORS: mailto:[log in to unmask]
       SUBSCRIPTION CHANGES & FAQ:  www.sigchi.org/web/faq.html
    --------------------------------------------------------------

    --------------------------------------------------------------
    Tip of the Day: Suspend your subscription if using auto replies
     CHI-WEB: www.sigchi.org/web POSTINGS: mailto:[log in to unmask]
              MODERATORS: mailto:[log in to unmask]
       SUBSCRIPTION CHANGES & FAQ:  www.sigchi.org/web/faq.html
    --------------------------------------------------------------