Encountering stronger password requirements: user attitudes and behaviors

  title={Encountering stronger password requirements: user attitudes and behaviors},
  author={R. Shay and Saranga Komanduri and P. Kelley and P. Leon and Michelle L. Mazurek and L. Bauer and N. Christin and L. Cranor},
  • R. Shay, Saranga Komanduri, +5 authors L. Cranor
  • Published in SOUPS 2010
  • Computer Science
  • Text-based passwords are still the most commonly used authentication mechanism in information systems. We took advantage of a unique opportunity presented by a significant change in the Carnegie Mellon University (CMU) computing services password policy that required users to change their passwords. Through our survey of 470 CMU computer users, we collected data about behaviors and practices related to the use and creation of passwords. We also captured users' opinions about the new, stronger… CONTINUE READING
    312 Citations
    Designing Password Policies for Strength and Usability
    • 77
    • PDF
    Can long passwords be secure and usable?
    • 117
    • PDF
    User Behaviors and Attitudes Under Password Expiration Policies
    • 7
    • PDF
    Strong passwords: Practical issues
    • K. Kato, V. Klyuev
    • Computer Science
    • 2013 IEEE 7th International Conference on Intelligent Data Acquisition and Advanced Computing Systems (IDAACS)
    • 2013
    • 5
    Building better passwords using probabilistic techniques
    • 50