Here's a message for web designers: If you're turning off clipboard functions in your browser, you're actually making things worse, not better.
I have several websites where I make payments, and for some reason, they've disabled copy and paste. This means I can't paste in the exact payment amount that I copied from my local database, which I use to calculate what I owe. Instead, I have to manually type it in, introducing the potential for errors.
Even worse, some sites disable the ability to paste in your credit card or bank account number. The logic behind this is usually "security," but in reality, all they're doing is forcing users to manually type long strings of numbers, increasing the chance of mistakes. Someone copying and pasting a known good source is far less likely to screw up than someone fat-fingering a number on their keyboard.
I keep all of my bank and credit card numbers in a database that I built. Whenever I need to make a payment or set up a new account, I can simply copy and paste my account number. I know this number is correct because it's stored securely in my own system. Instead of making me manually type in a string of sixteen digits, where a single typo could cause a payment failure, I should be able to paste it without issue.
I see this same problem on my own website when people try to log in. I can always tell who is not using a password manager or who is trying to type in the initial signup password my server sends them. Instead of copying and pasting the password from their email, they try to type it manually, and of course, they make mistakes.
If you're a web designer and you're turning off copy and paste, ask yourself: are you actually improving security, or just making life harder for your users? Because from where I'm sitting, all you're doing is creating frustration and unnecessary errors.
Turn off copy and paste? That's just plain stupid.
I agree completely. I believe it is indicative of the larger problem of an increasing number of people learning how to do tasks while being disinterested in why they do the steps of the task. It is like an electrician who knows how to wire a circuit but can't tell you why they used a particular wire size or breaker size. They are not taught in a modular way and often view learning anything "extra" as a waste of time. In the end, they don't have Legos.
Thomas Gonder
@Reply 14 months ago
Amen here brother. Hate that nuisance.
Jeffrey Kraft
@Reply 14 months ago
Yeah web developers stop disabling paste. I paste my password confirmation in because the odds of me duplicating it isn't that good some days.
Sami Shamma
@Reply 14 months ago
Yes. Turn off copy and paste is just plain stupid.
Thomas Gonder
@Reply 14 months ago
I'm guessing they think that not allowing paste will help stop hackers.
But a hacker is going to use a routine that directly enters the keystrokes programmatically, not via paste.
As mentioned in another thread, I use KeePass Password Safe. Although you can copy and paste, it has a very nice Perform Auto-Type button that gets around the "no paste" web sites as they just think you're typing it in. It also handles those dang sites that split the user id and password onto different pages. And those sites that have an extra Enter button just to make life even more confusing.
Sorry, only students may add comments.
Click here for more
information on how you can set up an account.
If you are a Visitor, go ahead and post your reply as a
new comment, and we'll move it here for you
once it's approved. Be sure to use the same name and email address.
This thread is now CLOSED. If you wish to comment, start a NEW discussion in
Captain's Log.