{"id":2913,"date":"2020-05-04T10:55:56","date_gmt":"2020-05-04T06:55:56","guid":{"rendered":"https:\/\/techxmedia.com\/?p=2913"},"modified":"2020-07-24T19:58:04","modified_gmt":"2020-07-24T15:58:04","slug":"how-ux-design-can-protect-users-privacy","status":"publish","type":"post","link":"https:\/\/techxmedia.com\/en\/how-ux-design-can-protect-users-privacy\/","title":{"rendered":"how UX design can protect users\u2019 privacy"},"content":{"rendered":"\n<p><em>Did you know TNW Conference has a track fully dedicated to exploring new design trends this year? Check out the full \u2018Sprint\u2019 program&nbsp;<a href=\"https:\/\/thenextweb.com\/conference\/tracks\/sprint\">here<\/a>.<\/em><\/p>\n\n\n\n<p>It\u2019s time for bed, but first, a few routine tasks:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Put on pajamas.<\/li><li>Brush teeth.<\/li><li>Open windows.<\/li><li>Unlock doors.<\/li><li>Place wallet, personal documents, and banking information in a convenient pile on the kitchen counter.<\/li><\/ul>\n\n\n\n<p>Sweet dreams.<\/p>\n\n\n\n<p>If that scenario is unsettling, consider how often the same sensitive information is entered into our digital devices. Without the proper security protocols in place, our assets and identities are easy prey. Worse, as&nbsp;<a href=\"https:\/\/www.toptal.com\/designers\/ui\" target=\"_blank\" rel=\"noreferrer noopener\">designers<\/a>&nbsp;of digital interfaces, a disregard for security places users at risk\u2014financially, professionally, relationally, and emotionally.<\/p>\n\n\n\n<p>Security isn\u2019t a trend or promotional tactic, it\u2019s a crucial aspect of user experience and interface design.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/bs-uploads.toptal.io\/blackfish-uploads\/uploaded_file\/file\/174153\/image-1580336800391-3b714f517d7a7c1bb76a97760ab986cf.jpg\" alt=\"UX security\"\/><figcaption>When digital products aren\u2019t properly secured, all the wrong characters gain access to users\u2019 information.&nbsp;(Aaron Burden)<\/figcaption><\/figure>\n\n\n\n<p>The ideal interface is simple to operate and safeguarded against attempts to steal users\u2019 private information. Delivering such a design is typically framed as a tradeoff between usability and security:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>If the interface is easy to use, it\u2019s less secure.<\/li><li>If it\u2019s secure, it\u2019s more difficult to use.<\/li><\/ul>\n\n\n\n<p>This tradeoff is a myth. We can design interfaces that are&nbsp;<strong>simple<\/strong>&nbsp;<em>and<\/em>&nbsp;<strong>secure<\/strong>&nbsp;without compromising the quality of either. Here,&nbsp;<a href=\"https:\/\/www.toptal.com\/designers\/ux\" target=\"_blank\" rel=\"noreferrer noopener\">UX designers<\/a>&nbsp;play a critical role by ensuring that both technical demands and user needs are met.<\/p>\n\n\n\n<p>In many ways, UX designers are interpreters. They decipher technical requirements and make them understandable for users. They also exercise situational awareness by deciding when to focus on simplicity or when to involve sophisticated security measures. Balance is key, but it can only be achieved by including all stakeholders from the earliest stages of design.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"get-stakeholders-involved-in-ux-security-early\">Get stakeholders involved in UX security early<\/h2>\n\n\n\n<p>There are multiple parties that must be consulted to design a secure and successful digital product. For instance, design teams have to ensure that their products comply with relevant regulations like&nbsp;<a href=\"https:\/\/www.hhs.gov\/hipaa\/for-professionals\/security\/laws-regulations\/index.html\" target=\"_blank\" rel=\"noreferrer noopener\">HIPAA<\/a>&nbsp;for the healthcare industry and&nbsp;<a href=\"https:\/\/www.pcicomplianceguide.org\/faq\/#1\" target=\"_blank\" rel=\"noreferrer noopener\">PCI DSS<\/a>&nbsp;for banking and financial services. Also, security features implemented by design teams must meet the standards set by the technical teams behind digital products.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/bs-uploads.toptal.io\/blackfish-uploads\/uploaded_file\/file\/174154\/image-1580336818016-914ac00410328a9a9754e95019ba82cf.jpg\" alt=\"Design for security\"\/><figcaption>Designers ought to be aware of the various security regulations that apply to the digital products they work on.<\/figcaption><\/figure>\n\n\n\n<p>When it comes to security, it\u2019s not uncommon for user input to be ignored. But to truly meet users\u2019 security needs, designers must grasp their motivations, behaviors, and expectations. Often, users know very little about digital security, so designers ought to learn to anticipate the levels of risk that users will face as they navigate through various screens and features. The earlier risks can be identified within the design process, the better.<\/p>\n\n\n\n<p>Ignoring stakeholders or incorporating their input late in the design process doubles the risk. It can open security holes in products that could have otherwise been prevented, or it can lead to products that are so secure they\u2019re barely usable.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"design-methods-for-product-security\">Design methods for product security<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"encryption\">Encryption<\/h3>\n\n\n\n<p>Encryption is a method of converting sensitive information into a code that appears to be random. It\u2019s an important design consideration in digital products with communication features. In apps where calls, texts, videos, images, and documents are frequently exchanged (think&nbsp;<a href=\"https:\/\/faq.whatsapp.com\/general\/28030015\/\" target=\"_blank\" rel=\"noreferrer noopener\">WhatsApp<\/a>), end-to-end encryption ensures that only the users involved in a conversation can see the data being exchanged.<\/p>\n\n\n\n<p>This means that no one, not the company behind an app, not data criminals, not even the government, can see the content of messages. When users know that their information is protected by such measures, they\u2019re much more willing to extend trust.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"authentication\">Authentication<\/h3>\n\n\n\n<p>It is essential to verify that only the owner of an account can log in\u2014and that all intruders are locked out. Authentication is the most effective way to secure digital products from unauthorized access. Features like usernames and password requirements ought to be identified and tested early in the design process.<\/p>\n\n\n\n<p>For additional security, two-factor authentication (2FA) can be added. With&nbsp;<a href=\"https:\/\/www.pcmag.com\/how-to\/two-factor-authentication-who-has-it-and-how-to-set-it-up\" target=\"_blank\" rel=\"noreferrer noopener\">2FA<\/a>, a username and password are entered, and a log-in code is sent to a mobile phone or email address.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/bs-uploads.toptal.io\/blackfish-uploads\/uploaded_file\/file\/174155\/image-1580336833268-214989ee13cc5975fcedb45fb220c4f6.jpg\" alt=\"Security user experience\"\/><figcaption>To receive an access code, Intuit\u2019s 2FA process allows users to choose between multiple delivery options.<\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"data-privacy\">Data Privacy<\/h3>\n\n\n\n<p>Ultimately, data privacy is an ethical consideration for designers and businesses. When users trade their personal data in exchange for access to a digital product, they\u2019re choosing to believe that the company that oversees the product will handle their information with integrity. They\u2019re also trusting that the features implemented by designers and developers are able to withstand data attacks.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"enhance-user-privacy-and-data-privacy\">Enhance user privacy and data privacy<\/h2>\n\n\n\n<p>It\u2019s worth repeating, digital products are made for users, not the other way around. Users\u2019 interactions with products should never come with the risk that their data will be leaked or stolen. Sadly, this isn\u2019t always the case.<\/p>\n\n\n\n<p>Most cybercrimes are carried out with the intent of obtaining users\u2019 personal data, but UX designers can help. How so? By implementing features that encourage users to choose stronger passwords and avoid placing excessive personal details online.<\/p>\n\n\n\n<p>For instance, a product\u2019s authentication interface may employ a friendly message to inform users about why it\u2019s important to have stronger passwords. Instead of forcing users to create a password with 12 characters, lower and uppercase letters, a number, and a symbol, the message could simply say, \u201cYou need a stronger password. Here\u2019s why it\u2019s important.\u201d This way, users better understand the necessity of securing their data and privacy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"remove-unnecessary-security-obstacles\">Remove unnecessary security obstacles<\/h2>\n\n\n\n<p>If product security depends on incorporating all stakeholders, then designers need to take the time to consult with developers and cybersecurity professionals. Developers typically have constraints that affect design, and they may be able to offer insights about the effectiveness of UX security features implemented by designers. Cybersecurity professionals can educate designers about the most up-to-date security strategies, tools, and compliance regulations.<\/p>\n\n\n\n<p>A word of caution: Consulting security experts is good, but overdoing security measures makes digital products cumbersome and encourages users to look elsewhere. Vague messages like \u201cYour internet connection isn\u2019t secure\u201d lead users to circumvent security features meant for their protection.<\/p>\n\n\n\n<p>Ultimately, it reflects poorly on businesses when legitimate users can\u2019t accomplish tasks or find themselves locked out of their accounts because of over-complicated digital security.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/bs-uploads.toptal.io\/blackfish-uploads\/uploaded_file\/file\/174156\/image-1580336846971-464f365f5b62c94847080079c16b4be5.jpg\" alt=\"Security UX design\"\/><figcaption>It\u2019s possible to overdo digital security features and frustrate users.&nbsp;(Kelly Sikkema)<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"secure-against-social-engineering\">Secure against social engineering<\/h2>\n\n\n\n<p>Of all the digital security attacks that take place, one scheme is considerably more common than any other. It accounts for nearly 90% of breaches worldwide and relies more on the art of deception than sophisticated technical abilities. What is this nefarious tactic?<\/p>\n\n\n\n<p>Phishing.<\/p>\n\n\n\n<p>Like con men of old,&nbsp;<a href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/security\/email-security\/what-is-phishing.html\" target=\"_blank\" rel=\"noreferrer noopener\">phishing<\/a>&nbsp;(which occurs most often in emails) relies heavily on social engineering strategies to scare, pressure, and confuse users into handing over sensitive information and hard-earned cash. To protect against phishing attacks, designers can create security forums that allow users to report spam and post warnings to other users. They can also employ popups or messages within their apps to alert users of known phishing attempts.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/bs-uploads.toptal.io\/blackfish-uploads\/uploaded_file\/file\/174157\/image-1580336859727-4adc84b7ae1189c74d6aa44010f187b3.jpg\" alt=\"Application security design\"\/><figcaption>Phishing weaponizes written communication by tricking people into sharing their sensitive information.&nbsp;(Taskin Ashiq)<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"designers-need-digital-security-too\">Designers need digital security too<\/h2>\n\n\n\n<p>For all the effort that goes into security, one overlooked vulnerability can seriously compromise the integrity of digital products. It has little to do with technology \u2014 it\u2019s designers themselves.<\/p>\n\n\n\n<p>For every product created, there are hundreds (even thousands) of design artifacts generated. Dozens of communication channels are utilized. Links to strategic documents are sent to multiple parties. And, distributed teams are increasingly dependent on cloud-based design tools.<\/p>\n\n\n\n<p>If designers don\u2019t take precautions to guard their work and communications, attackers will find ways to infiltrate organizational weak points. This may mean establishing VPNs, undergoing cybersecurity training, and enacting asset management and communication guidelines to prevent loose ends.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"design-for-security\">Design for security<\/h2>\n\n\n\n<p>Secure and usable interfaces don\u2019t happen by accident. They are the result of designers who take the time to identify points of data vulnerability and involve stakeholders early in the creative process. Security is no different than any other critical feature\u2014end users\u2019 needs mustn\u2019t be ignored.<\/p>\n\n\n\n<p>When designers find helpful ways to communicate the value of&nbsp;<a href=\"https:\/\/uxdesign.cc\/how-good-ux-leads-to-great-security-293327c83a90\" target=\"_blank\" rel=\"noreferrer noopener\">security<\/a>&nbsp;and ensure that safety features operate efficiently, users will reward the companies that oversee digital products with their trust and ongoing engagement.<\/p>\n\n\n\n<p><em>The&nbsp;<a href=\"https:\/\/www.toptal.com\/designers\/blog\" target=\"_blank\" rel=\"noreferrer noopener\">Toptal Design Blog<\/a>&nbsp;is a hub for advanced design studies by professional designers in the Toptal network on all facets of digital design, ranging from detailed design tutorials to in-depth coverage of new design trends, tools, and techniques. You can read the original piece written by Mayank Sharma&nbsp;<a href=\"https:\/\/www.toptal.com\/designers\/product-design\/ux-security\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>. Follow TopTal Design Blog on&nbsp;<a href=\"https:\/\/twitter.com\/toptaldesigners\" target=\"_blank\" rel=\"noreferrer noopener\">Twitter<\/a>,&nbsp;<a href=\"https:\/\/dribbble.com\/toptal\" target=\"_blank\" rel=\"noreferrer noopener\">Dribbble<\/a>,&nbsp;<a href=\"https:\/\/www.behance.net\/toptaldesigners\" target=\"_blank\" rel=\"noreferrer noopener\">Behance<\/a>,&nbsp;<a href=\"https:\/\/www.linkedin.com\/showcase\/toptaldesigners\/\" target=\"_blank\" rel=\"noreferrer noopener\">LinkedIn<\/a>,&nbsp;<a href=\"https:\/\/www.facebook.com\/toptaldesigners\" target=\"_blank\" rel=\"noreferrer noopener\">Facebook<\/a>, and&nbsp;<a href=\"https:\/\/www.instagram.com\/toptaldesigners\/\" target=\"_blank\" rel=\"noreferrer noopener\">Instagram<\/a>.&nbsp;<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Did you know TNW Conference has a track fully dedicated [&hellip;]<\/p>\n","protected":false},"author":40,"featured_media":2918,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"contributor":[],"class_list":["post-2913","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-other-tech-events"],"featured_image_src":"https:\/\/techxmedia.com\/en\/wp-content\/uploads\/2020\/05\/ux_header-796x417-1.png","author_info":{"display_name":"Techx Admin","author_link":"https:\/\/techxmedia.com\/en\/author\/techxadmin\/"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts\/2913","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/comments?post=2913"}],"version-history":[{"count":0,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts\/2913\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/media\/2918"}],"wp:attachment":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/media?parent=2913"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/categories?post=2913"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/tags?post=2913"},{"taxonomy":"contributor","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/contributor?post=2913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}