Improving interface designs to help users choose better passwords

Authors:
Richard M. Conlan;Peter Tarasewich
Affiliations:
Northeastern University, Boston, MA;Northeastern University, Boston, MA
Venue:
CHI '06 Extended Abstracts on Human Factors in Computing Systems
Year:
2006

Citing 8
Cited 1

Human-computer interaction

Human-computer interaction
Users are not the enemy

Communications of the ACM
A note on proactive password checking

Proceedings of the 2001 workshop on New security paradigms
Pretty good persuasion: a first step towards effective password security in the real world

Proceedings of the 2001 workshop on New security paradigms
Transforming the 'Weakest Link' — a Human/Computer Interaction Approach to Usable and Effective Security

BT Technology Journal
Making Passwords Secure and Usable

HCI 97 Proceedings of HCI on People and Computers XII
Designing the User Interface: Strategies for Effective Human-Computer Interaction (4th Edition)

Designing the User Interface: Strategies for Effective Human-Computer Interaction (4th Edition)
Password Memorability and Security: Empirical Results

IEEE Security and Privacy

A framework for reasoning about the human in the loop

UPSEC'08 Proceedings of the 1st Conference on Usability, Psychology, and Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Conventional wisdom seems to have concluded that traditional passwords are inherently insecure. The argument is usually that users choose bad passwords and cannot be expected to remember strong passwords. We feel that these conclusions are premature and that this argument is flawed. At present most password selection mechanisms are not designed according to basic HCI principles and we believe that this is highly responsible for the above conclusions. Our current research is reexamining the problem of password selection and memorability through the exploration of password selection mechanisms with novel interface designs. The goal of this research is develop both principles and designs that help users to choose passwords that are both memorable and secure.