Secure login

Is a secure login a turn off for users?

[cyril lesley fabio]

I work with a client who markets their site to various closed user groups. Currently, users must put in an access code (which not specific to the individual, but is used by all members of this closed user group).

I'm pondering implementing a secure login on the first page of the site. Initially we would ask users for their generic access code and then ask them to personally register. From then on we would ask them to login on an individual basis.

I initially wanted to use cookies to do a soft login of users but am told by our IT Department taht this is not feasible.

The benefits of this mean that we will be able to capture personal data and personalise content. Additionally this would enable us to give people the security of seeing the padlock and https in the url.

My concern is that the pop up which will appear on many users screen telling them they are about to enter a secure site. normally this appears when someone is about to transact, which seems ok. i am concerned that this may turn off/turn away users if they see this so early in their browsing of teh site.

Does anyone have any stats/experience of this

Thanks

Cyril

[MatthewHSE]

What about two login links: one for secure, the other for normal login? Seems to me Yahoo does that (though I'm not sure since I haven't been there for over six months).

[kenta]

Yahoo does still do the secure / non-secure options for logging in which is nice.

Personally I prefer secure logins, especially for sites that deal with any type of personal/financial info (ie: banking/retail/billed services). If there is no secure login available I will not use the service.

If I'm signing up for a user group, web forum, or something I care less about then non-secure is fine.

So if I were in your shoes I'd just determine what it is they do, if they should be using a secure login then present it or require it. if not, at least make it an option.