Hybrid password meters for more secure passwords – a comprehensive study of password meters including nudges and password information

Zimmermann, Verena; Marky, Karola; Renaud, Karen

doi:10.1080/0144929x.2022.2042384

Cited by 8 publications

(7 citation statements)

References 106 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In addition, the averages for each phase are shown in Figures 1-5, and an accumulated overview is given in Figure 6. To compare the presence of account remediation advice across different groups, we used a χ 2 test (α = 0.05) with the Benjamini-Hochberg procedure applied for posthoc pairwise comparisons [49], [52], [91].…”

Section: Resultsmentioning

confidence: 99%

A Transcontinental Analysis of Account Remediation Protocols of Popular Websites

Markert¹,

Adhikari²,

Das³

2023

Proceedings 2023 Symposium on Usable Security

View full text Add to dashboard Cite

Websites are used regularly in our day-to-day lives, yet research has shown that it is challenging for many users to use them securely, e.g., most prominently due to weak passwords through which they access their accounts. At the same time, many services employ low-security measures, making their users even more prone to account compromises with little to no means of remediating compromised accounts. Additionally, remediating compromised accounts requires users to complete a series of steps, ideally all provided and explained by the service. However, for U.S.-based websites, prior research has shown that the advice provided by many services is often incomplete. To further understand the underlying issue and its implications, this paper reports on a study that analyzes the account remediation procedure covering the 50 most popular websites in 30 countries, 6 each in Africa, the Americas, Asia, Europe, and Oceania. We conducted the first transcontinental analysis on the account remediation protocols of popular websites. The analysis is based on 5 steps websites need to provide advice for: compromise discovery, account recovery, access limitation, service restoration, and prevention. We find that the lack of advice prior work identified for websites from the U.S. also holds across continents, with the presence ranging from 37% to 77% on average. Additionally, we identified considerable differences when comparing countries and continents, with countries in Africa and Oceania significantly more affected by the lack of advice. To address this, we suggest providing publicly available and easyto-follow remediation advice for users and guidance for website providers so they can provide all the necessary information.

show abstract

Section: Resultsmentioning

confidence: 99%

A Transcontinental Analysis of Account Remediation Protocols of Popular Websites

Markert¹,

Adhikari²,

Das³

2023

Proceedings 2023 Symposium on Usable Security

View full text Add to dashboard Cite

show abstract

“…The research focus in these projects has often been on end users, who, for example, should be supported in: Using secure authentication methods (Zimmermann et al. 2022 ; Zimmermann and Gerber 2020 a; Marky et al. 2020 a; Zimmermann et al.…”

Section: Usable Security and Privacymentioning

confidence: 99%

“…Using secure authentication methods (Zimmermann et al. 2022 ; Zimmermann and Gerber 2020 a; Marky et al. 2020 a; Zimmermann et al.…”

Section: Usable Security and Privacymentioning

confidence: 99%

“…Further research, consequently focusing on the password as most favoured authentication scheme, revealed that hybrid password meters, i.e., password meters that include password feedback, a feedback nudge, and additional guidance for creating a secure password, enable users to create better passwords compared to each intervention (feedback, nudge, additional guidance) on its own (Zimmermann et al. 2022 ). More specifically, Zimmermann et al.…”

Section: Usable Security and Privacymentioning

confidence: 99%

“…More specifically, Zimmermann et al. ( 2022 ) found differences in terms of password strength, memorability, and user perceptions applying a between-subject design in an online study with 646 participants who used one out of nine variations of password meters. This effect, however, seems to be independent of the type of feedback nudge used.…”

Section: Usable Security and Privacymentioning

confidence: 99%

See 2 more Smart Citations

Current topics of interdisciplinary cooperation between engineering and human sciences

et al. 2023

View full text Add to dashboard Cite

In this article, we highlight current research directions in the Technikpsychologie research area, using the example of the interdisciplinary research work of FAI (Work and Engineering Psychology Research Group at the Technical University of Darmstadt) and the articles included in this special issue. To this end, we relate the articles in this special issue from the research areas of road traffic planning (Hupfer et al.), usable IT security and privacy solutions (Renaud), social aspects of technically mediated communication (Diefenbach), human-centered interface design (Mucha et al.), aviation safety (Santel), human-centered design of autonomous vehicles (Lindner & Stoll), and perceptual psychology-oriented product design (Zandi & Khanh) to current research projects at FAI.Practical RelevanceTechnical products only offer added value by efficiently supporting users in achieving their goals if they have been developed appropriately for the context of use and the individual characteristics of the users. The human-centered design of—especially technical—products reflects this through an iterative and participatory development process. In this article, we describe nine examples of such human-centered design of technology products. The research results and the methods presented provide insights for developers and decision-makers in the fields of transportation, IT, vehicle development and general product design.

show abstract

Friend or phisher: how known senders and fear of missing out affect young adults' phishing susceptibility on social media

Klütsch,

Schwab,

Böffel

et al. 2024

Humanit Soc Sci Commun

View full text Add to dashboard Cite

Phishers exploit the social nature of social media, thereby targeting young adults, who are highly susceptible to phishing. This study focuses on two under-researched factors influencing young adults’ susceptibility to social media phishing: the user’s relation to the message sender and Fear of Missing Out (FoMO). In an online vignette study, 193 young adults were presented with Instagram chat messages from either known or unknown senders, accompanied by varying consequences for not clicking. These ranged from missing an event with no other user (no consequences) to missing an event with one (low) or several other users (high consequences). The analysis focused on intended behaviour and suspicion, while also capturing young adults’ situational fear of missing out on the scenario-based event with the message sender (State FoMO) and their individual Trait FoMO. The results highlight that the user-sender relation is a strong predictor of phishing susceptibility and a crucial contributor to State FoMO. Furthermore, young adults who are high in Trait FoMO exhibited lower suspicion towards phishing attempts. These findings are discussed along with methodological considerations. In addition, strategies to mitigate the identified vulnerabilities are suggested, focusing on areas where social media phishing is most likely to affect young adults.

show abstract

Hybrid password meters for more secure passwords – a comprehensive study of password meters including nudges and password information

Cited by 8 publications

References 106 publications

A Transcontinental Analysis of Account Remediation Protocols of Popular Websites

A Transcontinental Analysis of Account Remediation Protocols of Popular Websites

Current topics of interdisciplinary cooperation between engineering and human sciences

Friend or phisher: how known senders and fear of missing out affect young adults' phishing susceptibility on social media

Contact Info

Product

Resources

About