"I Added '!' at the End to Make It Secure": Observing Password Creation in the Lab

No abstract is available for this paper.

• Publication year

  2015

• Venue

  Symposium On Usable Privacy and Security

• Publication date

  2015-07-22

• Fields of study

  Computer Science

• Identifiers

  No identifiers available.

• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Measuring Real-World Accuracies and Biases in Modeling Password Guessability

  2015cited by this paper
• Password Meters and Generators on the Web: From Large-Scale Empirical Study to Getting It Right

  2015cited by this paper
• Biometric authentication on iPhone and Android: Usability, perceptions, and influences on adoption

  2015cited by this paper
• Can long passwords be secure and usable?

  2014cited by this paper
• The Tangled Web of Password Reuse

  2014influential reference
• Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts

  2014cited by this paper
• Telepathwords: Preventing Weak Passwords by Reading Users' Minds

  2014cited by this paper
• Electronic Authentication Guideline

  2014cited by this paper
• The Password Life Cycle: User Behaviour in Managing Passwords

  2014cited by this paper
• From Very Weak to Very Strong: Analyzing Password-Strength Meters

  2014cited by this paper
• On Semantic Patterns of Passwords and their Security Impact

  2014influential reference
• On the ecological validity of a password study

  2013cited by this paper
• Measuring password guessability for an entire university

  2013cited by this paper
• Effect of grammar on security of long passwords

  2013cited by this paper
• Pico: No More Passwords!

  2013cited by this paper
• The password allocation problem: strategies for reusing passwords effectively

  2013influential reference
• Enhancing Password Security through Interactive Fear Appeals: A Web-Based Field Experiment

  2013cited by this paper
• Password advice shouldn't be boring: Visualizing password guessing attacks

  2013cited by this paper
• How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation

  2012cited by this paper
• The Science of Guessing: Analyzing an Anonymized Corpus of 70 Million Passwords

  2012cited by this paper
• The Benefits of Understanding Passwords

  2012cited by this paper
• Visualizing semantics in passwords: the role of dates

  2012cited by this paper
• Linguistic Properties of Multi-word Passphrases

  2012cited by this paper
• Adaptive Password-Strength Meters from Markov Models

  2012cited by this paper
• Folk Models of Home Computer Security

  2012cited by this paper
• Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms

  2012cited by this paper
• The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes

  2012cited by this paper
• Of passwords and people: measuring the effect of password-composition policies

  2011cited by this paper
• Using and managing multiple passwords: A week to a view

  2011cited by this paper
• The security of modern password expiration: an algorithmic framework and empirical analysis

  2010cited by this paper
• Testing metrics for password creation policies by attacking large sets of revealed passwords

  2010cited by this paper
• The true cost of unusable password policies: password use in the wild

  2010cited by this paper
• So long, and no thanks for the externalities: the rational rejection of security advice by users

  2009cited by this paper
• Multiple password interference in text passwords and click-based graphical passwords

  2009cited by this paper
• Password Cracking Using Probabilistic Context-Free Grammars

  2009cited by this paper
• Improving text passwords through persuasion

  2008cited by this paper
• Improving password security and memorability to protect personal and organizational information

  2007cited by this paper
• A large-scale study of web password habits

  2007cited by this paper
• An Empirical Investigation: Health Care Employee Passwords and Their Crack Times in Relationship to HIPAA Security Standards

  2007cited by this paper
• Password sharing: implications for security design based on social practice

  2007cited by this paper
• Password management strategies for online accounts

  2006cited by this paper
• Human selection of mnemonic phrase-based passwords

  2006cited by this paper
• Password policy: the good, the bad, and the ugly

  2004cited by this paper
• Improving computer security for authentication of users: Influence of proactive password restrictions

  2002cited by this paper
• Users are not the enemy

  1999cited by this paper
• A future-adaptive password scheme

  1999cited by this paper
• Contextual design - defining customer-centered systems

  1998cited by this paper
• Symposium

  1979cited by this paper
• The Advanced Computing Systems Association a Future-adaptable Password Scheme a Future-adaptable Password Scheme

  year unknowncited by this paper

• Sharing passwords with strangers – A laboratory study

  2026cites this paper
• The (Un)suitability of Passwords and Password Managers in Virtual Reality

  2025cites this paper
• Understanding and Improving User Adoption and Security Awareness in Password Checkup Services

  2025cites this paper
• A Platform for Physiological and Behavioral Security

  2025cites this paper
• MoPE: A Mixture of Password Experts for Improving Password Guessing

  2025cites this paper
• TGI-FPR: An Improved Multi-Label Password Guessing Model

  2025cites this paper
• Improving Password Guessing With Isomorphism Modeling

  2025cites this paper
• “It’s Definitely New and Different…It’s Really Engaging”: Understanding the Power of Storytelling Towards Secure Password Creation

  2025influential citation
• User-Specific Feature Selection in Keystroke Dynamics Authentication

  2025cites this paper
• Using Parallel Techniques to Accelerate PCFG-Based Password Cracking Attacks

  2025cites this paper
• Questioning a security assumption: Are unique passwords harder to remember than reused or modified passwords?

  2025cites this paper
• Passwords Are Meant to Be Secret: A Practical Secure Password Entry Channel for Web Browsers

  2024cites this paper
• Measuring the Prevalence of Password Manager Issues Using In-Situ Experiments

  2024cites this paper
• An Analysis of Password Managers’ Password Checkup Tools

  2024influential citation
• Measuring NIST Authentication Standards Compliance by Higher Education Institutions

  2024cites this paper
• Improving Users' Passwords with DPAR: a Data-driven Password Recommendation System

  2024cites this paper
• Mental Model-Based Designs: The Study in Privacy Policy Landscape

  2024cites this paper
• Encouraging Users to Change Breached Passwords Using the Protection Motivation Theory

  2024influential citation
• Reminisce for Securing Private-Keys in Public

  2024cites this paper
• A Comparison of Three Approaches to Assist Users in Memorizing System-Assigned Passwords

  2024cites this paper
• The Effect of Domain Terms on Password Security

  2024cites this paper
• Special Characters Usage and Its Effect on Password Security

  2024cites this paper
• How Students Deal With Password Security: Case Study of Nalut University Students

  2024cites this paper
• Nudging Users to Change Breached Passwords Using the Protection Motivation Theory

  2024influential citation
• Password Managers Use Among Individuals Who Are Visually Impaired: Awareness, Adoption, and Rejection

  2024cites this paper
• The Authentication Gap: Higher Education's Widespread Noncompliance with NIST Digital Identity Guidelines

  2024cites this paper
• Decoding developer password patterns: A comparative analysis of password extraction and selection practices

  2024cites this paper
• "We've Disabled MFA for You": An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments

  2023cites this paper
• Trust-Based Geo-Social Access Control Framework: Employee Management through Machine learning Techniques

  2023cites this paper
• Lost and not Found: An Investigation of Recovery Methods for Multi-Factor Authentication

  2023cites this paper
• Investigating Security Folklore: A Case Study on the Tor over VPN Phenomenon

  2023cites this paper
• Improving Real-world Password Guessing Attacks via Bi-directional Transformers

  2023cites this paper
• The Impact of Exposed Passwords on Honeyword Efficacy

  2023cites this paper
• A Two-Decade Retrospective Analysis of a University's Vulnerability to Attacks Exploiting Reused Passwords

  2023cites this paper
• In the Quest to Protect Users from Side-Channel Attacks - A User-Centred Design Space to Mitigate Thermal Attacks on Public Payment Terminals

  2023cites this paper
• Pass2Edit: A Multi-Step Generative Model for Guessing Edited Passwords

  2023cites this paper
• Influences of Displaying Permission-related Information on Web Single Sign-On Login Decisions

  2023cites this paper
• Tales from the Git: Automating the detection of secrets on code and assessing developers’ passwords choices

  2023cites this paper
• A Deep Dive into User's Preferences and Behavior around Mobile Phone Sharing

  2023cites this paper
• Can Password Meter be More Effective Towards User Attention, Engagement, and Attachment?: A Study of Metaphor-based Designs

  2023cites this paper
• An Empirical Analysis of Enterprise-Wide Mandatory Password Updates

  2023cites this paper
• Measuring Website Password Creation Policies At Scale

  2023cites this paper
• Human-centered Behavioral and Physiological Security

  2023cites this paper
• Harder, better, faster, stronger: Optimising the performance of context-based password cracking dictionaries

  2023cites this paper
• Mangling Rules Generation With Density-Based Clustering for Password Guessing

  2023cites this paper
• Evolution of Password Expiry in Companies: Measuring the Adoption of Recommendations by the German Federal Office for Information Security

  2023cites this paper
• Divergences in Blame Attribution after a Security Breach based on Compliance Behavior: Implications for Post-breach Risk Communication

  2023cites this paper
• "Would You Give the Same Priority to the Bank and a Game? I Do Not!" Exploring Credential Management Strategies and Obstacles during Password Manager Setup

  2023cites this paper
• How "What you think you know about cybersecurity" can help users make more secure decisions

  2023cites this paper
• FIDO2 the Rescue? Platform vs. Roaming Authentication on Smartphones

  2023cites this paper
• Improving Password Generation Through the Design of a Password Composition Policy Description Language

  2022cites this paper
• Folk Models of Misinformation on Social Media

  2022cites this paper
• That Depends - Assessing User Perceptions of Authentication Schemes across Contexts of Use

  2022cites this paper
• Is Your Password Sexist? a Gamification-Based Analysis of the Cultural Context of Leaked Passwords

  2022cites this paper
• Password policies of most top websites fail to follow best practices

  2022cites this paper
• Studying Users' Willingness to Use a Formally Verified Password Manager

  2022cites this paper
• Poster: The last step of password strength evaluation

  2022cites this paper
• #Segments: A Dominant Factor of Password Security to Resist against Data-driven Guessing

  2022cites this paper
• PESrank: An Explainable online password strength estimator

  2022cites this paper
• Helping novice developers harness security issues in cloud-IoT systems

  2022cites this paper
• Edge Security: Challenges and Issues

  2022cites this paper
• “Nah, it’s just annoying!” A Deep Dive into User Perceptions of Two-Factor Authentication

  2022cites this paper
• Hybrid password meters for more secure passwords – a comprehensive study of password meters including nudges and password information

  2022cites this paper
• PasswordTensor: Analyzing and explaining password strength using tensor decomposition

  2022cites this paper
• MIGRANT

  2022cites this paper
• Prospects for Improving Password Selection

  2022cites this paper
• A large-scale analysis of Wi-Fi passwords

  2022cites this paper
• Two studies of the perceptions of risk, benefits and likelihood of undertaking password management behaviours

  2022cites this paper
• Behavioral attributes in password reuse: Analysis of password practices in work and personal spaces

  2022cites this paper
• Do Password Managers Nudge Secure (Random) Passwords?

  2022cites this paper
• Usable Privacy and Security

  2022cites this paper
• User Perceptions of Five-Word Passwords

  2022cites this paper
• This paper is included in the Proceedings of the Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022)

  2022cites this paper
• Client-Side Hashing for Efficient Typo-Tolerant Password Checkers

  2022cites this paper
• A Survey on Password Guessing

  2022cites this paper
• It is not as simple as that: Playing out password security trainings in order to nudge password changes

  2021cites this paper
• Human Factors in Security Research: Lessons Learned from 2008-2018

  2021cites this paper
• Comparing the Effectiveness of Text-based and Video-based Delivery in Motivating Users to Adopt a Password Manager

  2021cites this paper
• Chunk-Level Password Guessing: Towards Modeling Refined Password Composition Representations

  2021cites this paper
• Leet Usage and Its Effect on Password Security

  2021cites this paper
• Mitigating the Security Intention-Behavior Gap: The Moderating Role of Required Effort on the Intention-Behavior Relationship

  2021cites this paper
• “Do this! Do that!, and Nothing will Happen” Do Specifications Lead to Securely Stored Passwords?

  2021cites this paper
• User, Usage and Usability: Redefining Human Centric Cyber Security

  2021cites this paper
• Nudging users towards better security decisions in password creation using whitebox-based multidimensional visualisations

  2021influential citation
• Vision: What Johnny learns about Password Security from Videos posted on YouTube

  2021cites this paper
• Think Harder! Investigating the Effect of Password Strength on Cognitive Load during Password Creation

  2021cites this paper
• TransPCFG: Transferring the Grammars From Short Passwords to Guess Long Passwords Effectively

  2021cites this paper
• Exploring Usable Security to Improve the Impact of Formal Verification: A Research Agenda

  2021cites this paper
• Using Personal Data to Support Authentication: User Attitudes and Suitability

  2021cites this paper
• A Systematic Literature Review of Empirical Methods and Risk Representation in Usable Privacy and Security Research

  2021influential citation
• Exploring the Acceptability of Graphical Passwords for People with Dyslexia

  2021cites this paper
• On the Security of Smartphone Unlock PINs

  2021cites this paper
• Towards Quantum Large-Scale Password Guessing on Real-World Distributions

  2021cites this paper
• Prioritizing security over usability: Strategies for how people choose passwords

  2021cites this paper
• Understanding users’ perceptions to improve fallback authentication

  2021influential citation
• How viable is password cracking in digital forensic investigation? Analyzing the guessability of over 3.9 billion real-world accounts

  2021influential citation
• 'Passwords Keep Me Safe' - Understanding What Children Think about Passwords

  2021cites this paper
• GazeMeter: Exploring the Usage of Gaze Behaviour to Enhance Password Assessments

  2021cites this paper
• They Would do Better if They Worked Together: The Case of Interaction Problems Between Password Managers and Websites

  2021cites this paper
• Does the layout of the Android unlock pattern affect the security and usability of the password?

  2021cites this paper