How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation

By Blase Ur, Patrick Gage Kelley, Saranga Komanduri, Joel Lee, M. Maass, Michelle L. Mazurek, Timothy Passaro, Richard Shay, Timothy M. Vidas, Lujo Bauer and 2 more. USENIX Security Symposium, 2012

366 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

The Tangled Web of Password Reuse (2014, methodology): “Here is an example policy: I. Passwords must not contain the user’s entire name/user ID.”
Nudges for Privacy and Security (2017, background): “Ur et al. [2012a] found that users who were shown password meters created longer passwords, and with some meters also created passwords that were more difﬁcult to guess.”
"...No one Can Hack My Mind": Comparing Expert and Non-Expert Security Practices (2015, background): “Other work has investigated the effect of strength meters on password creation [15, 30, 49].”
Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks (2016, background): “Many common meters rate passwords based on their length or inclusion of different character classes [33,88].”
Zipf’s Law in Passwords (2017, unknown): “While stricter policies might make passwords harder to crack, the side effect is that users may feel harder to create and remember passwords, and thus usability is reduced [13].”
A Study of Probabilistic Password Models (2014, background): “8 for other scenarios, because of space limitation.”