Habits from signing in to things · habit 18 of 40

Typing an address into the recovery field

The mail field is the one people fill without looking, because on every other form it is the field that makes the account real. Fingers reach it before the label is read.

The habit

You type a real mail address or phone number into a registration field because that is what those fields are for.

Why it is automatic

Depth of repetition is what makes this one hard to interrupt. A mail address has been typed countless times by an adult with an ordinary online life. It is not recalled, it is executed, in the way a signature is. The hand starts before the eye has finished the label, and on a familiar layout the hand is usually right.

Form design reinforces it. The contact field sits in the same position on almost every registration screen, right under the handle, often with a marker saying it is required. People have learned that leaving it blank means being refused, and the fastest way through a refusal is to fill it in properly first time.

There is a reasonable belief underneath as well. Everywhere else, an account with no contact address is an account you will eventually lose. Giving one is prudence rather than carelessness, and it is entirely correct in the place it was learned.

What it actually does here

Start with what the field cannot be doing. No message is coming, so it is not a delivery address. No reset exists, so it is not a recovery route. Anything typed there is doing something other than the thing the label suggests, whatever the page says about it.

The remaining possibilities are short. The field may be inherited from whatever software the page was built on and thrown away. It may be stored, because an operator wants a contact channel or a way to recognise people coming back. Or it may be the whole purpose of the page, on something built to look like a registration screen and keep what goes into it.

This matters more than most fields because the value cannot be taken back. A password can be changed. A handle can be abandoned. An address is an identifier belonging to an account somewhere else, and typing it once puts a permanent record of it wherever it went.

Phone numbers are the sharper case. A number is issued to a person by a company that holds documents about them, it stays stable across years, and it is already the recovery route for many other accounts. It is among the strongest joining keys an ordinary person has, which is why forms ask for it.

Optional actually means optional

Registration forms elsewhere mark fields optional and then behave as though they are not, so people have learned to fill everything in and get through. That training is worth undoing for one screen. A field with no marker beside it can be left empty, and on many pages a good deal of what is asked for is unmarked.

The way to find out is to read before typing, which sounds trivial and is the hardest instruction on this page. The whole habit exists because reading is skipped. Slowing down for the four seconds it takes to read four labels is the entire intervention, and on its own it stops most of what this page describes.

The field that is the whole point of the page

Somewhere among the pages that look like registration screens are ones whose only purpose is the contents of that box. They do not need to work afterwards. They do not need to produce an account at all. A page that collects a real address from a small share of visitors has done its job, and the visitor leaves believing the site was broken that day.

That is why the advice here is about the reflex rather than about spotting fakes. Judging pages by appearance is not a skill anyone reliably has, and the same reflex is taken from another angle on the page about looking for a sign in with button. Not producing the identifier is a defence that does not depend on judging anything correctly.

What to do instead

The goal is that nothing typed into this screen can point at anything else you own.

1. Read every label on the form before touching the keyboard. Four seconds, once, at the only screen where it matters.
2. Leave optional fields empty. If the form accepts the account without one, it was not needed.
3. If a field is genuinely required, do not satisfy it with anything that identifies you anywhere else.
4. Do not give a phone number on a page like this. It is the strongest joining key most people carry.
5. Assume anything typed into any field is kept forever, and decide what to type on that basis rather than on what the label promises.

How to notice you did it anyway

This one leaves traces on your own machine as well, because the software that helped you fill it in records having helped.

• Try the field again on a fresh visit and see whether the browser offers to complete it. If it does, it was filled before.
• Check whether your browser asked to save anything after you submitted, and what it thought it was saving.
• Look at the account behind that address for anything unexpected, without treating silence as proof of anything.
• Go back through the form in your memory and count the fields you can actually recall reading.
• Ask whether the address you used is the one that recovers your other accounts. That is the case that matters most.

What readers ask about this habit