Improving text passwords through persuasion

Forget, Alain; Chiasson, Sonia; Oorschot, Paul C. van; Biddle, Robert

doi:10.1145/1408664.1408666

Cited by 110 publications

(87 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…However, the mean login time was 19 seconds (by the end of Lab Session 2). To place this time in context, we compare it to Forget et al [9], who reported login times for 8-character text passwords as well as Persuasive Text Passwords (PTPs). 2 In the PTP variant that provided the optimal combination of security and usability, the login time was 17.1 sec.…”

Section: Interpretation Of Resultsmentioning

confidence: 99%

User Study, Analysis, and Usable Security of Passwords Based on Digital Objects

Biddle

Mannan

Oorschot

et al. 2011

IEEE Trans.Inform.Forensic Secur.

Self Cite

View full text Add to dashboard Cite

Abstract-Despite all efforts, password schemes intended to deploy or encourage the use of strong passwords have largely failed. As an alternative to enable users to create, maintain and use high quality passwords willingly, we propose Object-based Password (ObPwd), leveraging the universe of personal or personally meaningful digital content that many users now own or have access to. ObPwd converts user-selected digital objects to high-entropy text passwords. Memorization of exact passwords is replaced by remembering password objects. We present the design details, variants, and usability and security analysis of ObPwd; and report on the results of a hybrid in-lab/at-home user study on 32 participants. The results suggest the scheme has good usability, with excellent memorability, acceptable login times, and very positive user perception, achieved while providing strong security for the threat context explored. We believe this work lays the foundations for a promising password selection paradigm.

show abstract

Section: Interpretation Of Resultsmentioning

confidence: 99%

User Study, Analysis, and Usable Security of Passwords Based on Digital Objects

Biddle

Mannan

Oorschot

et al. 2011

IEEE Trans.Inform.Forensic Secur.

Self Cite

View full text Add to dashboard Cite

show abstract

“…The proposed system uses the idea of Graphical password mechanism [3] with a series of images used for accessing the system. System provides graphics for authentication.…”

Section: ____________________________________________________________mentioning

confidence: 99%

A Novel Method for Graphical Password Mechanism

Siddharth¹

2015

IJRITCC

View full text Add to dashboard Cite

Abstract-For the verification of authorized users in computer systems, various text based or biometrics methods are used. But these methods have some drawbacks. It is difficult to remember and recall the textual i.e. alphanumeric passwords. To avoid this drawback users prefer to create effortless, short, easy and insecure passwords which are easily guessable by hacker and this makes the system more vulnerable to attacks. On other hand, verification mechanisms based on biometrics offers security to a good extents. But they are quite luxurious for implementation. Cost becomes a key factor in the case of biometrics. Also any injury to the body part used in biometric authorization results in denial of access or performance issues. Graphical password provides another way by providing passwords that are more protected and unforgettable in a reasonable price. In this system, user clicks on images instead of typing passwords for accessing the system. This paper describes and examines usability and security of graphical password mechanism for authentication using graphical passwords. Proposed system describes characteristics for security and performed empirical study comparing Graphical password mechanism with Biometric passwords and alphanumeric password.

show abstract

“…The take-a-tail method may be viewed as a variant on previously proposed password strengthening schemes. Forget et al [18], randomly interleave system-generated characters into a password. The user may request a reshuffling of these characters until she obtains a password she regards as memorable.…”

Section: Related Workmentioning

confidence: 99%

Honeywords

Juels¹,

Rivest

2013

Proceedings of the 2013 ACM SIGSAC Conference on Computer &Amp; Communications Security - CCS '13

194

View full text Add to dashboard Cite

We suggest a simple method for improving the security of hashed passwords: the maintenance of additional "honeywords" (false passwords) associated with each user's account. An adversary who steals a file of hashed passwords and inverts the hash function cannot tell if he has found the password or a honeyword. The attempted use of a honeyword for login sets off an alarm. An auxiliary server (the "honeychecker") can distinguish the user password from honeywords for the login routine, and will set off an alarm if a honeyword is submitted.

show abstract

Improving text passwords through persuasion

Cited by 110 publications

References 20 publications

User Study, Analysis, and Usable Security of Passwords Based on Digital Objects

User Study, Analysis, and Usable Security of Passwords Based on Digital Objects

A Novel Method for Graphical Password Mechanism

Honeywords

Contact Info

Product

Resources

About