A common trust building problem
Users are scared to tap anything
The short answer: make every action undoable. Here is how to recognise this problem in your funnel, why it happens, and how the best consumer apps design it away.
How to recognise it
- Hover-and-hesitate patterns all over session recordings
- Features unused because trying them feels risky
- Support tickets asking permission: “if I tap this, will it...?”
Why are users afraid to explore the app?
Users explore in exact proportion to how safe mistakes feel. One accidental deletion, one email sent early, one setting that broke something, and a user learns to move through your product like a minefield.
Caution looks like calm in the metrics, but it is expensive: frightened users adopt fewer features, complete fewer flows, and never develop the fluency that retains.
The tell is in the tickets: people asking what a button does before pressing it are people who have stopped trusting the interface to be forgiving.
How do you make users brave? Undo everywhere, and say so
Make undo the default physics of the product: deletions that can be taken back, sends with a grace window, drafts that save themselves, a version history for anything built.
Then advertise the safety at the moment of risk: “you can undo this” next to the scary action changes behaviour more than the undo itself. Safety that is invisible does not embolden anyone.
Reserve real confirmation dialogs for the genuinely irreversible, and make those dialogs specific: “delete 43 photos permanently?” is information; “are you sure?” is noise that trains blind clicking.
The payoff compounds: users who feel safe try things, and users who try things find the features that keep them.
The building blocks that solve it
- Fail Safe: Undo, drafts and grace windows make exploring safe.
- Micro Interactions: Reassurance delivered in the moment, not the manual.
Who does this well
Gmail: Undo Send turned the scariest moment in email into a five-second grace period, and an entire behaviour changed.
Figma: Version history makes every experiment reversible: bold work is downstream of that safety.
Questions founders ask
Confirmation dialogs or undo?
Undo, wherever physics allows. Confirmations interrupt everyone to protect against the few; undo protects the few without taxing everyone.
A dialog also trains its own dismissal: by the tenth “are you sure?”, nobody is reading it.
Which actions genuinely need confirmation?
The irreversible and the expensive: permanent deletion, payments, anything affecting other people.
Even there, be specific about consequences, and pair the dialog with a way back wherever one can exist.