| Heading | Login to NatWest | Log in to NatWest Invest | Maintains product identity and consistency with Screen 1.Principle: Name the product clearly | Recommend |
| Step indicator | Step 2. | Step 2 of 2 | If the standard journey consistently contains two customer-visible steps, this confirms that the customer is on the final step.Principle: Reuse established patterns before inventing new ones | Recommend; validate against existing NatWest patterns and whether the journey can introduce additional authentication steps |
| PIN instruction | Enter the following numbers from your PIN | Enter these digits from your PIN: | Uses the more precise ‘digit’ and removes unnecessary directional wording, making the instruction shorter and more direct.Principle: Use precise, concise language | Recommend |
| PIN field labels | Enter the 1st numberEnter the 4th numberEnter the 3rd number | 1st digit / 3rd digit / 4th digit | Reduces repetition and is easier to scan. Accessible names should retain full context, for example, ‘First digit of your PIN’.Principle: Use precise, concise language | Recommend; accessibility testing required |
| Password instruction | Enter the following characters from your password | Enter these characters from your password: | Matches the PIN pattern, removes unnecessary directional wording and makes the instruction shorter and more direct.Principle: Use precise, concise language | Recommend |
| Password field labels | Enter the 5th characterEnter the 6th characterEnter the 10th character | 5th character / 6th character / 10th character | Uses the same concise pattern as the PIN fields to reduce repetition. Accessible names should retain full context.Principle: Use precise, concise language | Recommend; accessibility testing required |
| Credential input order | PIN example: 1st / 4th / 3rdPassword example: 5th / 6th / 10th | Present the requested PIN digits and password characters in ascending order. | Puts requested positions in a predictable sequence, with the aim of reducing unnecessary cognitive effort without changing which positions the authentication system selects.Principle: Reduce cognitive effort | Recommend; validate with security, engineering and existing NatWest authentication patterns |
| Primary button | Log in (disabled state) | (unchanged label) | This is the step where authentication can complete, unlike on Screen 1. Log in remains the visually dominant primary action.Principle: Match the label to what happens next | Recommend |
| Secondary button | Back | Back to customer number | Makes the destination clear rather than relying on a generic label.Principle: Match the label to what happens next | Recommend; confirm the purpose of the existing action. See Appendix A. |
| Action order | Log in → Back | Back to customer number → Log in | Places secondary navigation before the final task action in the logical reading order, while keeping Log in visually dominant as the primary action.Principle: Match hierarchy and order to the journey | Recommend; validate against established NatWest form and navigation patterns |
| Recovery link | Forgotten your PIN or password | Forgotten your PIN or password? | Already specific to the credentials requested on this screen; I've retained it and corrected the punctuation.Principle: Treat recovery as part of the main journey | Keep; confirm the recovery route |
| Disabled-button behaviour | – | Review the disabled-button behaviour against NatWest’s established validation and accessibility patterns. | Customers should be able to understand what is required before they can log in, without adding helper copy unless it provides information the form does not already make clear.Principle: Reuse established patterns before inventing new ones | Needs interaction design and accessibility review |
| Fraud-prevention callout | Remember, we will never call you and ask for your full PIN, password or card reader codes. (part of the bottom security paragraph) | Title: Stay safe from fraudBody: We’ll never call you and ask for your full PIN, password or card reader codes.Link: How to protect yourself from fraud | Keeps the customer-safety warning visible at the point where PIN and password characters are entered, with a clear route to further fraud-prevention guidance.Principle: Protect trust without overwhelming customers; Disclose information at the point of need | Recommend; validate with product, design system, fraud/security, accessibility and legal/compliance. |
| Authorised-access / legal notice | Only individuals who have a NatWest account and authorised access to Online Banking should proceed beyond this point. For the security of customers, any unauthorised attempt to access customer bank information will be monitored and may be subject to legal action. | If you’re a NatWest customer and authorised to use Online Banking, you can continue.We monitor unauthorised attempts to access customer information. These may result in legal action. | Maintains the same hierarchy and separation of customer-safety, access and legal messages as Screen 1, without hard-coding an unapproved legal wording variation.Principle: Protect trust without overwhelming customers | Needs legal, fraud, security and compliance sign-off |