User Experience for Resetting a Password

Password Reset (Mobile)

Platform: iOS

Product context: This fictional app is an AI-powered habit & wellness coach. Because it stores sensitive wellness data, account recovery needs to be fast, transparent, and trustworthy.

Primary User Frictions > Design Fixes

Users do not remember or know which identifier is on file (email/phone/username).

Fix: Entry accepts email / phone / username; next screen shows masked options (jo***@… / (***) ***-1234) for security.

Rationale: Shifts effort from recall to recognition, prevents exposing personal identifying information, reducing lockouts and customer support tickets.

---

Fear of being stuck after choosing a method

Fix: Card-based selection; “Use email/Mobile phone” available from one-time password option (OTP).

Rationale: Preserves user control; reversible choices reduce anxiety and complexity.

---

OTP uncertainty / missed message.

Fix: Resend with countdown (“Resend in 0:30”). Additionally there is an option to go back to verification methods to change.

Rationale: Improves visibility of system status and provides a clear recovery path, setting expectations and keeping momentum.

---

Awkward code entry on mobile

Fix: 6 boxes and iOS AutoFill hint.

Rationale: Lowers cognitive load, supports paste/AutoFill for speed and accuracy, which reduces input errors.

---

Hidden / Unclear password rules

Fix: Visible requirements near the field (8+ characters, special character, no usage of name. As well as inline validation errors to indicate issues with passwords.

Rationale: Prevents errors before submit, giving immediate, actionable guidance and increasing first-try success.

---

Call-To-Action (CTA) hidden by keyboard

Fix: Sticky Continue above the keyboard with safe-area padding.

Rationale: Keeps the primary action in the thumb zone, eliminating scroll hunting and improving completion rate.

---

Unclear outcome after an attempt to reset

Fix: Success screen and “Return to log in” button CTA. Routed to homepage with a username prefilled.

Rationale: Provides confirmation and closure (plus email receipt for added verification) and simplifies re-entry, reinforcing trust.