Post

For maximum security, all login screens should be black text on black backgrounds. There should be no feed back on if your login was successful or not. Someone standing behind you might learn where the user name and password fields are and how long your password is or what your username is. For maximum security, all authentication servers will reject all authentication requests because, it's username-password and all the hostile UX in the world won't improve it.