← Auth / Security

Re-auth modal v2

auth / security · wireframes · user-facing

Re-confirming with a password before critical actions (sudo mode). Policy — Re-authentication.

Wireframe
confirmation

Confirm it's you 1

Ending a session is a protected action. Enter your password again to continue.

DS Dmitry Sokolov
dmitry@company.com 2
Password
•••••••••••• 3
The same password you sign in with Forgot password? 4
After confirming, the password isn't asked for again for a few minutes. 5
wrong password

Confirm it's you

Ending a session is a protected action. Enter your password again to continue.

Wrong password. Try again — repeated failed attempts are slowed down. 6
DS Dmitry Sokolov
dmitry@company.com
Password
•••••••
Check your keyboard layout and Caps Lock Forgot password?
  1. 1 The heading names the very action being confirmed — the user sees exactly what they're confirming before entering a password.
  2. 2 Account context — the name and email of the already signed-in user, read-only. This is a confirmation, not a fresh sign-in.
  3. 3 The same password as at sign-in. With TOTP enabled, the gate accepts a code from the app (MFA).
  4. 4 "Forgot password?" leads to password reset — leaving the sudo flow; the critical action isn't performed in that case.
  5. 5 After success, critical actions don't re-prompt for the password for a few minutes (the sudo window), tied to the current session.
  6. 6 A wrong password is slowed as attempts mount — the same brute-force defense line shared with sign-in.