Online community best practices: Effective signup process

Reading time: About 5 minutes

This article focuses on providing new members with an effective join/signup process. Although some of these principles may seem obvious, I’ve gone through plenty of membership signup forms that still suck. So hence the post.

4 elements of an effective online community signup process

1. Easy to use web form design

As Luke Wroblewski put it in Web Form Design in the Wild, Part II, “Forms control the gates of membership.” Never take form design with a grain of salt. Filling out web forms requires the highest level of user commitment and are the most complex UI elements of a website.

Although people kill time browsing the Web, they don’t kill that time by looking for the next web form to fill out. In fact, you and I, as well as every other user out there in the world avoid web forms like the plague. So if your signup form is complicated then go ahead and call it quits. Complex forms are the bane of conversion.

Here are a few quick tips to make your web forms easier to use:

  • Make form fields and labels align vertically, not horizontally
  • Make form field size relative to the expected input length
  • If it must be a long form, break it into logical sections (a quick card sort can help do that)
  • Show an example of expected input
  • Don’t force the user to follow formats (like xxx-xxx-xxxx). Format input after submission programmatically
  • Make the call to action, or submit button, very easy to find
  • Avoid CAPTCHA by using better data validation. Deleting a few spam accounts is better than pissing users off from the start

2. Lazy registration

Lazy registration is a relatively new concept to the scene, made possible by increasing levels of interactivity on the Web. What is lazy registration? While guests use the features available to them, their behaviors and preferences are stored in cookies. When guests finally register because your online community website kicks ass, some of the information is already filled out from the cookies.

An example of lazy registration is if a guest posts a comment and inputs their name and email address, that information is stored in a cookie. When he signups because he wants a profile and access to member-only benefits, the signup form will draw that information from cookies, saving users valuable time and keystrokes.

3. Partial commitment

Partial commitment is a persuasion strategy as old as dirt. It’s the reason why you’re more likely to keep hearing “yes” if a person has been responding with “yes.” It’s the reason why that tricky car salesman asks you to take a test drive. Commitment in little chunks at a time simply works. While some of these tricks are unethical exploitations, getting partial commitment to increase online community signups on the web is not only an effective sales technique, it’s good for users, too.

The benefit to users is somewhat related to the idea of progressive disclosure in that users only need what they need in each moment to complete a task because any more is overwhelming. In terms of online community commitment, users don’t want to spend time writing a biography to join your online community. They want to do the minimum required to start playing. They’ll give you more information as they find another benefit they want to unlock.

If you’re thinking, “I’ll give them a complete form, but mark only a few fields as required,” you should know that users tend to fill out all fields and ignore requirements. Just give them the bare minimum fields required to sign up initially, and all other fields available to fill out at their leisure.

4. Build confidence

As with any commitment, people need confidence in their decision. When submitting personal information over the web, users need to be confident that their information is protected and respected.

The most important thing is to address their concern for privacy, which is usually done through a privacy policy. Most privacy policies are failures because they are stuffed down into the footer—a place where users never look when filling out forms—and they are full of legal jargon gobbledygook. When has legal jargon gobbledygook ever made you feel comforted?

Good privacy policies are short, written in plain speak, and very easy to find—like a link at the top of the form. Give the link to your privacy policy a teaser, such as “We have a privacy policy to keep your information private. [link to privacy policy].”

Other elements of building user confidence include

  • Well designed UI
  • Consistent branding from page to page
  • A secure form (use a lock icon above the form, don’t rely on the https in the address bar to tell the story)
  • Pull quotes from current members
  • Reinforcement of membership benefits

Bonus tip: Confirmation

Although you’ve led your new members through an effective signup process, your followup/confirmation e-mail is just as important. Followup e-mails play key roles in the signup process:

  • Users feel confident that they successfully completed the process
  • Users have a record of their username and password (because they’ll forget it almost certainly)
  • Users are reminded of their account later as they browse their inbox
  • Followups are great opportunities to progressively “sale” additional benefits of membership. Provide them with ideas of what they can begin doing

Conclusion

Your signup form may be the most crucial part of your online community. You should be doing everything you can to insure an easy signup process that makes the user feel safe.

13 comments skip to comment form

  1. Freelance web developer Nick Yeoman said— 1 hour later

    Awesome, I think that it is great someone is posting how social media should be and not how to use it.

    Thanks!

    #1
  2. Ralf said— 1 hour later

    The suggestions are really good except for the thing with sending passwords in e-mails and store them plain text in the database. The username will do. If a user forgets the password he or she can use the “Forgot password” feature to reset their password.

    #2
  3. Brian Cray said— 1 hour later

    Thanks for the feedback!

    Ralf: Passwords can be sent the first time from the $_POST info before they are MD5′d and added to the database. What are your thoughts on that?

    #3
  4. katie said— 6 hours later

    The problem with emailing passwords is that it is insecure, even if you later hash the passwords to store. Best practices seem to indicate you should only ever send the username OR the password.

    #4
  5. David Pinn said— 6 hours later

    What purpose is served by asking people to confirm their e-mail address by clicking a link in the follow-up e-mail? Are there any principles relevant to that aspect of the sign-up process?

    #5
  6. Brandon Cox said— 7 hours later

    Pretty awesome thoughts about some small things that are really huge things. I think the web is maturing in the sense of making usability and relationship building come together.

    #6
  7. Matthew MacSuga said— 8 hours later

    I agree, passwords should not be sent in emails. Any other person that gains access to that users email, now has their password if the user doesn’t delete it (most don’t).. think Hotmail, Gmail, etc. Bad idea all around.
    Forgot password feature via links is a much better idea if the user forgets than to have it in an email.

    - Matthew (@csharpbydesign on Twitter)

    #7
  8. Chris Taylor said— 3 days later

    > Passwords can be sent the first time from the $_POST info before they are MD5′d and added to the database. What are your thoughts on that?

    I don’t think there’s a need to send the password in the confirmation email, as the user has only just typed it in. They are unlikely to forget it so quickly, especially if you’ve dne the “confirm password” thing to make sure they typed it right.

    Of course, sometimes people go back to signup confirmation emails to get their details, but I would guess this is pretty rare. Much better to use a “forgot password?” feature, and make this prominent in the confirmation email.

    So, the signup confirmation email should be like a “welcome pack” which gives people all the information they need to get started, and confidence they’ve done the right thing. Here’s an example which covers the main points (for a fictional events/networking website):

    ==

    Hi Bob, thanks for signing up with XYZ.com!

    You can log in at any time at http://xyz.com/login using these details:

    Username: bob
    Password: (the password you entered when you signed up)

    If you ever forget your password you can reset it here: http://xzy.com/password. If you get stuck when logging in contact our support team using the form at http://xyz.com/support.

    So, where are you going to start?

    The first thing you might want to do is fill in your XYZ.com profile: http://xyz.com/profile. Fill in your location and we’ll even tell you about XYZ.com events happening near you! Just visit your profile page to get the latest information, automatically filtered for you: http://xyz.com/bob

    Then join in the conversation by linking your online accounts: http://xyz.com/aggregate. This means that anything you post at Facebook, Twitter, your blog, LinkedIn (and many more websites) will automatically show up on your XYZ.com profile page.

    You may also want to post your own events at http://xyz.com/announce From here you can send out invitations, check who is attending, and add files for people to download.

    There’s loads more happening at XYZ.com, check out the events list at http://xyz.com/events and get meeting people!

    The XZY.com Team

    P.S. If you get stuck, remember you can contact us at http://xyz.com/support. We’re here to help.

    ==

    I think an email like that is a good thing for people to have in their inboxes – although of ccourse this information should also be shown to them on-page when they sign up to get them started.

    #8
  9. Luke said— 3 days later

    I agree with the sentiments posted by a few already that plain text passwords should not be sent in an email. I believe this is part of the reason for depth of the Twitter security breach, when someone gained access to a Twitter employees email account and was then able to find other passwords.

    If you give me an easy to find link to reset my password which will send an email and as long as the email will come quickly with a link (that will expire) to reset it, I am happy.

    Otherwise great article.

    Also I’m curious about the form fields and labels aligning vertically as opposed to horizontally. Brian did you do some A/B testing or eye tracking research on that? Just curious to know if there are any stats about the particular suggestion.

    #9
  10. Brian Cray said— 3 days later

    Luke: Yes. http://briancray.com/2009/07/27/eye-tracking-studies-influence-redesign/

    #10
  11. Techdivine said— 1 month later

    Hi

    Awesome post

    Keep them coming

    Be Well

    Techdivine

    #11
  12. Unni Krishnan said— 1 month later

    Really agree to Chris Taylor’s comments…apart from the point of sending plain text passwords to the confirmation email..there should defienetly be forgot password option which should really fetch him the password..otherwise the article is really great…thanks for the post..

    #12
  13. ngah said— 7 months later

    i dont like n i hate………………………….

    #13
  14. Respond to this post—

Return to navigation
1309