The true cost of unusable password policies: password use in the wild

By Philip Inglesant, M. Sasse. International Conference on Human Factors in Computing Systems, 2010

423 citations recorded by the source corpus.

Subfields: Information Systems, Human-Computer Interaction, Signal Processing

View Paper: https://www.semanticscholar.org/paper/049c1e1f7c3cfbc0a1b052d26db79455254a1aee

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Information Systems

In Human-Computer Interaction

In Signal Processing

Citations in the corpus

Of passwords and people: measuring the effect of password-composition policies (2011, background): “, when it is difficult to generate an acceptable password, or when passwords must be changed frequently), users will adopt coping strategies that can reduce both security and productivity [1, 7, 16, 18].”
"...No one Can Hack My Mind": Comparing Expert and Non-Expert Security Practices (2015, background): “They found that these users were motivated to be secure, but struggled to change passwords, to create new passwords, and to comply with password policies [22].”
Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms (2012, methodology): “…quantifying the effect of password-composition policies are estimating the entropy of passwords induced by password-composition policies using NIST guidelines [8], and empirically analyzing passwords created under different password-composition policies with password-guessing tools (e.g., [46]).”
Account sharing in the context of networked hospitality exchange (2014, background): “INTRODUCTION Studies on password sharing in diverse contexts [5,7,10,11] have pointed out challenges resulting from a disregard of people’s practices and called for holistic approaches to designing systems and security policies.”
A Design Space for Effective Privacy Notices (2015, background): “Further, data protection authorities in Europe and other countries may assess whether the described practices meet more stringent criteria, such as use limitation, proportionality of data practices, and user access options [41, 43].”
How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation (2012, background): “Furthermore, strict policies can frustrate users, inhibit their productivity, and lead users to write their passwords down [1, 14, 16, 21, 32].”