Redesigning the User
Sign-In Journey

Redesigning the User Sign-In Journey

Redesigning the User
Sign-In Journey

Platform

Platform

VS mobile app and
responsive web

VS mobile app and
responsive web

Team

Team

UX Designer (me), Product Manager, Engineering Lead, UX Copywriter

UX Designer (me), Product Manager, Engineering Lead, UX Copywriter

Where We Started

Where We Started

Victoria’s Secret is a global fashion brand with millions of users, most of whom shop during key seasonal events.

The project began as an effort to reduce escalating support costs from password resets and minimize fraudulent login attempts. But as we dug deeper, we uncovered broader user friction around login behavior.

This case study walks through how we redefined the problem, what we discovered, and the design decisions that followed.

Victoria’s Secret is a global fashion brand with millions of users, most of whom shop during key seasonal events.

An average user only sign in twice a year, often unsure of their credentials.
The result? Confusion, drop-offs, and costly support.

Before redesigning, we dug into the data to understand where users were struggling.

61%

61%

61%

Login Success Rate

Login Success

Rate

76%

76%

76%

Drop-off Rate Post Error

Drop-off Rate Post Error

2.3 min

Average Login Time

Average Login Time

UX Framework

UX Framework

A clear structure we followed to turn user pain points into tested, user-first design solutions.

A clear structure we followed to turn user pain points into tested, user-first design solutions.

Empathized with Users
Conducted surveys, empathy mapping, and journey mapping to understand user pain points.


Defined Core Problems
Used affinity mapping and "How Might We" framing

to distill insights into action


Ideated Solutions
Sketched early concepts, user flows, and low-fidelity wireframes to explore design


Built & Tested Prototypes
Created high-fidelity mockups and validated them through usability testing to refine the final experience.

The Show Starts Now!

Before exploring solutions, we ran discovery with VS Loyalty Gold-tier users (Age group 25–45) to map their mental models and login behaviors on our existing login experience. Through empathy mapping and task-based interviews, we uncovered friction rooted in cognitive overload, low recall, and mismatched expectations.

What she Feels

What she Thinks

What she Says

What she Does

“I don’t remember if I made an account or just continued as guest.”

“I usually shop when there’s a big sale or discount.”

“Isn’t there a way to just get a code? Some websites send a link.”

“I must have shopped here... but which email did I use?”

“If this takes too long, I’ll just skip it or try later.”

“Why does this feel more complicated than it needs to be?”

Scrolls through inbox for old VS emails to guess which email was used

Switches between login attempts using 2-3 different emails

Tries password reset but doesn’t wait for the email to arrive

Mentally compares VS to Sephora/Nykaa login which she finds faster

A little embarrassed to not remember

Frustrated by the lack of immediate clarity

Anxious it may lock her out or make her reset everything again

Relieved when other sites “just send a code” instead of asking questions

What she Feels

What she Thinks

What she Says

What she Does

“I don’t remember if I made an account or just continued as guest.”

“I usually shop when there’s a big sale or discount.”

“Isn’t there a way to just get a code? Some websites send a link.”

“I must have shopped here... but which email did I use?”

“If this takes too long, I’ll just skip it or try later.”

“Why does this feel more complicated than it needs to be?”

Scrolls through inbox for old VS emails to guess which email was used

Switches between login attempts using 2-3 different emails

Tries password reset but doesn’t wait for the email to arrive

Mentally compares VS to Sephora/Nykaa login which she finds faster

A little embarrassed to not remember

Frustrated by the lack of immediate clarity

Anxious it may lock her out or make her reset everything again

Relieved when other sites “just send a code” instead of asking questions

What she Feels

What she Thinks

What she Says

What she Does

“I don’t remember if I made an account or just continued as guest.”

“I usually shop when there’s a big sale or discount.”

“Isn’t there a way to just get a code? Some websites send a link.”

“I must have shopped here... but which email did I use?”

“If this takes too long, I’ll just skip it or try later.”

“Why does this feel more complicated than it needs to be?”

Scrolls through inbox for old VS emails to guess which email was used

Switches between login attempts using 2-3 different emails

Tries password reset but doesn’t wait for the email to arrive

Mentally compares VS to Sephora/Nykaa login which she finds faster

A little embarrassed to not remember

Frustrated by the lack of immediate clarity

Anxious it may lock her out or make her reset everything again

Relieved when other sites “just send a code” instead of asking questions

Qualitative Questions

Quantitative Questions

Research Insight

1

What problems do you often encounter when logging in to an account in an application?

2

What do you do if the password is wrong or forgot the password?

3

What are the common issues that you face during the login, sign-up, and forget password processes?

Qualitative Questions

Quantitative Questions

Research Insight

1

What problems do you often encounter when logging in to an account in an application?

2

What do you do if the password is wrong or forgot the password?

3

What are the common issues that you face during the login, sign-up, and forget password processes?

Qualitative Questions

Quantitative Questions

Research Insight

1

What problems do you often encounter when logging in to an account in an application?

2

What do you do if the password is wrong or forgot the password?

3

What are the common issues that you face during the login, sign-up, and forget password processes?

How Others Do It

We patterned top retail and beauty brands—both direct and indirect competitors—to understand what worked, what didn’t, and where Victoria’s Secret could lead.

Key Takeaways for Victoria’s Secret

Key Takeaways for Victoria’s Secret

These patterns directly influenced our recommendation to pivot away from a traditional password-first form.

These patterns directly influenced our recommendation to pivot away from a traditional password-first form.

Account Uncertainty
Help users orient themselves early in the flow without making assumptions.

Password Fatigue

Reduce reliance on memory and offer lower-effort authentication paths.

No Dead Ends
Design fail-safe scenarios that gently guide users forward—whether that’s retrying, resetting, or switching methods.

Experience Benchmarking
Align the flow with common mental models and frictionless patterns already familiar to users.

Design Concepts

Design Concepts

From insights and audits, we proposed two core redesign concepts

Accounts

Redesign Login Experience

100%

Share

H

Page 1

Assets

Layers

Assets

Layers

Login Screen Figma File

Rahul

Josh

Siddhi

Smith

You

Rahul

Josh

Siddhi

Smith

You

Rahul

Josh

Siddhi

Smith

You

Export

Effects

Stroke

100%

E5E5E5

Mixed

Mixed

Fill

Click + to replace mixed content.

Background

Layer

Pass Through

100%

Constraints

Mixed

Mixed

Group

0

208

0

0

0

H

78

Y

W

Code

Prototype

Design

Option A: Password-first + optional OTP fallback

Option A: Password-first + optional OTP fallback

Option A: Password-first + optional OTP fallback

Keeps traditional form structure
Introduces "Use Verification Code" as an alternate method

Keeps traditional form structure Introduces "Use Verification Code" as an alternate method

Keeps traditional form structure Introduces "Use Verification Code" as an alternate method

Familiar Format

Leverages users' muscle memory with traditional email-password login structure.

Copy Address

Quick Build

Copy Address

Unclear Routing

Copy Address

Hidden Flexibility

Familiar Format

Leverages users' muscle memory with traditional email-password login structure.

Copy Address

Quick Build

Copy Address

Unclear Routing

Copy Address

Hidden Flexibility

Familiar Format

Leverages users' muscle memory with traditional email-password login structure.

Copy Address

Quick Build

Copy Address

Unclear Routing

Copy Address

Hidden Flexibility

Option B: Email-first (sniffer) flow + choose OTP or password

Option B: Email-first (sniffer) flow + choose OTP or password

Option B: Email-first (sniffer) flow + choose OTP or password

This layout begins with a single email input. Based on whether the email matches an existing account, the user is then guided to sign in using a password or OTP—or directed to create a new account.

Keeps traditional form structure Introduces "Use Verification Code" as an alternate method

Keeps traditional form structure Introduces "Use Verification Code" as an alternate method

Recognition First

Low Cognitive Load

Breaking the flow into smaller steps eased mental effort compared to A’s all-at-once form.

Copy Address

Flexible Choices

Copy Address

Extra Step

Recognition First

Low Cognitive Load

Breaking the flow into smaller steps eased mental effort compared to A’s all-at-once form.

Copy Address

Flexible Choices

Copy Address

Extra Step

Recognition First

Low Cognitive Load

Breaking the flow into smaller steps eased mental effort compared to A’s all-at-once form.

Copy Address

Flexible Choices

Copy Address

Extra Step

Making the Call

We ran a two-quarter A/B test using a controlled rollout. 50% of users continued on the existing login flow (control), while the other half experienced Option A or B.

We tracked core UX metrics: login success, time to complete, user confidence, and error rates.

Option A felt familiar—like an old login form users had seen before, tapping into Jakob’s Law. But when things went wrong, recovery was unclear—violating the principle of Error Prevention and increasing Cognitive Load.

Option B acted more like a smart concierge. It applied Recognition over Recall by checking account status upfront, and used Hick’s Law to simplify choices—offering just what the user needed, when they needed it. It reduced friction, restored user confidence, and gave them back a sense of control.
It proved more adaptable, confident, and user-centric making it the clear winner.

Option A felt familiar—like an old login form users had seen before, tapping into Jakob’s Law. But when things went wrong, recovery was unclear—violating the principle of Error Prevention and increasing Cognitive Load.

Option B acted more like a smart concierge. It applied Recognition over Recall by checking account status upfront, and used Hick’s Law to simplify choices—offering just what the user needed, when they needed it. It reduced friction, restored user confidence, and gave them back a sense of control.
It proved more adaptable, confident, and user-centric making it the clear winner.

Finally this is how

Finally this is how

She Signs In

She Signs In

The Outcome: Real Impact at Scale

Once we rolled out the redesigned login experience to 100% of our user base, the shift was immediate.
What started as a UX problem -users forgetting credentials & abandoning login- turned into measurable business wins.

61%

84%

Login Success Rate

76%

32%

Drop-off Rate Post Error

2.3 min

1.2 min

Average Login Time

The Impact — What It Meant for the Business

More users logged in, fewer got stuck, and support costs dropped. OTP adoption soared, anonymous sessions declined, and the business saved over $1.1M in just one quarter.
A simple login change, a massive ripple effect.

65.7%

Preferred OTP

+23%

Signed-in Users

↓54%

Reset Password

What’s Next? And What We’d Do Better

What’s Next? And What We’d Do Better

What’s Next? And What We’d Do Better

While the redesigned flow delivered major wins, there’s always room to grow. A few edge cases still challenged users especially those on poor networks or with older devices and while OTP worked well, not everyone prefers email…

Keeps traditional form structure Introduces "Use Verification Code" as an alternate method

Keeps traditional form structure Introduces "Use Verification Code" as an alternate method

Add Social Login

Simplify access further with Apple, Google, and Facebook sign-in options.

Copy Address

Enable SMS OTP

Copy Address

Context-Aware

Add Social Login

Simplify access further with Apple, Google, and Facebook sign-in options.

Copy Address

Enable SMS OTP

Copy Address

Context-Aware

Add Social Login

Simplify access further with Apple, Google, and Facebook sign-in options.

Copy Address

Enable SMS OTP

Copy Address

Context-Aware

Thanks for reading

Thanks for reading

Thanks for reading

behance.net/harsh_chauhan