Pinstripe Presents: Corporate Recruiting - How Does Your Organization Measure Up?
How Does Your Password Measure Up
Transcript of How Does Your Password Measure Up
![Page 1: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/1.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 1/69
Blase Ur, Patrick Gage Kelley, Saranga Komanduri, Joel Lee, Michael Maass,Michelle L. Mazurek, Timothy Passaro, Richard Shay, Timothy Vidas,Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor
How does your password measure up?
The effect of strength meters onpassword creation
![Page 2: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/2.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 2/69
Password Meters
•
Feedback of password strength at creation timeEncourage users to create “stronger” passwords
PayPal
![Page 3: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/3.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 3/69
Password Meters
•
Widely usedGoogle
WordPress
USENIX
![Page 4: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/4.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 4/69
Password Meters
•
Come in all shapes and sizes
![Page 5: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/5.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 5/69
Primary Research Questions
1. How do password meters affect …? CompositionGuessabilityCreation processMemorabilityUser sentiment
2. What elements of meter design are important?We present the first large-scale experiment onhow the visual and scoring aspects of meters
affect password properties
![Page 6: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/6.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 6/69
Methodology
•
2,931-participant online study• Between-subjects design
15 conditions: no meter + 14 different meters
• 2-part study, 2+ days apartCompensated $0.55 and $0.70, respectively
![Page 7: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/7.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 7/69
Methodology
•
Part 1: Create a password and answer a surveyabout its creationScenario: Main email provider is requiring you tochange your password
Only requirement: 8+ characters
• Part 2: Emailed to return, re-enter password, andanswer a survey about remembering password
![Page 8: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/8.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 8/69
Overview of Conditions
• Control conditions
• Visual differences
• Scoring differences
• Both visual & scoring differences
![Page 9: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/9.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 9/69
Control Conditions
• Conditions to which all others were compared:
No meter: No feedback on strength
Baseline meter : Standard password meter
![Page 10: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/10.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 10/69
Baseline Password Meter
• Based on meters used “in the wild” 8 lowercase letters would fill 1/3 rd of the meter
• Higher scores possible from:
Longer passwords, e.g., passwordpasswordMore character classes, e.g., Pa$5worD
![Page 11: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/11.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 11/69
Baseline Password Meter
![Page 12: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/12.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 12/69
Baseline Password Meter
Non-segmented bar
![Page 13: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/13.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 13/69
Baseline Password Meter
Bad Poor Fair Good Excellent
![Page 14: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/14.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 14/69
Baseline Password Meter
Provides a suggestion
![Page 15: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/15.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 15/69
Baseline Password Meter
Checks against OpenWall cracking dictionary
![Page 16: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/16.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 16/69
Baseline Password Meter
Changes color: red orange/yellow green
![Page 17: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/17.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 17/69
Baseline Password Meter
![Page 18: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/18.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 18/69
Baseline Password Meter
![Page 19: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/19.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 19/69
Overview of Conditions
• Control conditions (2)
• Visual differences (7)
• Scoring differences (4)
• Both visual & scoring differences (2)
![Page 20: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/20.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 20/69
Conditions with Visual Differences
![Page 21: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/21.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 21/69
Conditions with Visual Differences
![Page 22: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/22.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 22/69
Conditions with Visual Differences
![Page 23: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/23.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 23/69
Conditions with Visual Differences
![Page 24: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/24.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 24/69
Conditions with Visual Differences
![Page 25: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/25.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 25/69
Conditions with Visual Differences
![Page 26: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/26.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 26/69
Bunny Condition
![Page 27: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/27.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 27/69
Conditions with Scoring Differences
![Page 28: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/28.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 28/69
Conditions with Scoring Differences
![Page 29: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/29.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 29/69
Conditions with Scoring Differences
![Page 30: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/30.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 30/69
Conditions with Scoring Differences
![Page 31: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/31.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 31/69
Conditions with Scoring Differences
![Page 32: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/32.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 32/69
Conditions with Scoring Differences
![Page 33: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/33.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 33/69
Conditions with Scoring Differences
![Page 34: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/34.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 34/69
Conditions with Visual & Scoring Diff.
![Page 35: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/35.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 35/69
Conditions with Visual & Scoring Diff.
![Page 36: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/36.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 36/69
Conditions with Visual & Scoring Diff.
![Page 37: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/37.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 37/69
Conditions with Visual & Scoring Diff.
![Page 38: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/38.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 38/69
Conditions with Visual & Scoring Diff.
![Page 39: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/39.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 39/69
Conditions with Visual & Scoring Diff.
![Page 40: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/40.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 40/69
Stringent Meters
• Those with more stringent scoring:Half-scoreOne-third-scoreText-only-halfBold text-only-half
![Page 41: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/41.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 41/69
Participants
• 2,931 participantsRecruited on Amazon’s Mechanical Turk
• 63% male, 37% female
• 40% technical (degree/job)
• 18 to 74 years old
• 96 countries42% from India32% from U.S.
M i f R l
![Page 42: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/42.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 42/69
Metrics for Results
• Composition
• Guessability
•
Creation process• Memorability
•
Sentiment
M i P d C i i
![Page 43: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/43.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 43/69
Metric – Password Composition
• Password length
P d L h
![Page 44: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/44.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 44/69
Password Length
P d L h
![Page 45: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/45.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 45/69
Password Length
Meters lead to
longer passwords
M i G bili
![Page 46: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/46.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 46/69
Metric – Guessability
• Guessability – how many guesses to crack?Threat model: offline attack
• Brute-force first guesses: aaaaaaaa, aaaaaaab• Better first guesses: 12345678, password
Cracking algorithm: Weir et al. (Oakland ‘09)
Guess calculator: Kelley et al. (Oakland ‘12)
Weak adversary: 500 million guesses (5×10 8)Medium adversary: 50 billion guesses (5×10 10)Strong adversary: 5 trillion guesses (5×10 12)
R lt G bilit (N t )
![Page 47: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/47.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 47/69
Results – Guessability (No meter)
Number of Guesses
P e r c e n t a g e o
f P a s s w
o r d s C r a c k e
d
0%
10%
20%
30%
40%
50%
10 4 10 5 10 6 107 10 8 109 1010 10 11 1012 10 13
No meter
Weak5×10 8
Medium5×10 10
Strong5×10 12
Better
R lt G bilit (C t l )
![Page 48: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/48.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 48/69
Results – Guessability (Controls)
Number of Guesses
P e r c e n t a g e o
f P a s s w
o r d s C r a c k e
d
0%
10%
20%
30%
40%
50%
10 4 10 5 10 6 107 10 8 109 1010 10 11 1012 10 13
No meterBaseline meter
Weak5×10 8
Medium5×10 10
Strong5×10 12
R lt G bilit (Vi l)
![Page 49: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/49.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 49/69
Results – Guessability (Visual)
Number of Guesses
P e r c e n t a g e o
f P a s s w
o r d s C r a c k e
d
0%
10%
20%
30%
40%
50%
10 4 10 5 10 6 107 10 8 109 1010 10 11 1012 10 13
No meterBaseline meter
Text-onlyGreenTiny
HugeBunnyNo suggestionsThree-segment
Weak5×10 8
Medium5×10 10
Strong5×10 12
R lt G bilit (Vi l)
![Page 50: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/50.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 50/69
Results – Guessability (Visual)
Number of Guesses
P e r c e n t a g e o
f P a s s w
o r d s C r a c k e
d
0%
10%
20%
30%
40%
50%
10 4 10 5 10 6 107 10 8 109 1010 10 11 1012 10 13
No meterBaseline meter
Text-onlyGreenTiny
HugeBunnyNo suggestionsThree-segment
Weak5×10 8
Medium5×10 10
Strong5×10 12
Visual changes don’t
significantly increaseresistance to guessing
R lt G bilit (S i g)
![Page 51: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/51.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 51/69
Results – Guessability (Scoring)
Number of Guesses
P e r c e n t a g e o
f P a s s w
o r d s C r a c k e
d
0%
10%
20%
30%
40%
50%
10 4 10 5 10 6 107 10 8 109 1010 10 11 1012 10 13
No meterBaseline meter
Nudge-comp8Bold text-only
half
Text-only halfNudge-16One-third-scoreHalf-score
Weak5×10 8
Medium5×10 10
Strong5×10 12
Results Guessability (Significant)
![Page 52: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/52.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 52/69
Results – Guessability (Significant)
Number of Guesses
P e r c e n t a g e o
f P a s s w
o r d s C r a c k e
d
0%
10%
20%
30%
40%
50%
10 4 10 5 10 6 107 10 8 109 1010 10 11 1012 10 13
No meter
One-third-scoreHalf-score
Weak5×10 8
Medium5×10 10
Strong5×10 12
Results Guessability (Significant)
![Page 53: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/53.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 53/69
Results – Guessability (Significant)
Number of Guesses
P e r c e n t a g e o
f P a s s w
o r d s C r a c k e
d
0%
10%
20%
30%
40%
50%
10 4 10 5 10 6 107 10 8 109 1010 10 11 1012 10 13
No meter
One-third-scoreHalf-score
Weak5×10 8
Medium5×10 10
Strong5×10 12
Stringent meters with
visual bars increaseresistance to guessing
Creation Process
![Page 54: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/54.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 54/69
Creation Process
• Time to create password
• Changed their mind during creation
Results Password Time of Creation
![Page 55: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/55.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 55/69
Results – Password Time of Creation
T i m e o
f c r e a t i o n
( s )
0
50
100
150
200
Results Password Time of Creation
![Page 56: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/56.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 56/69
Results – Password Time of Creation
T i m e o
f c r e a t i o n
( s )
0
50
100
150
200
Results Password Time of Creation
![Page 57: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/57.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 57/69
Results – Password Time of Creation
T i m e o
f c r e a t i o n
( s )
0
50
100
150
200
More time was spent
creating a passwordwith stringent meters
Results Changed Their Mind
![Page 58: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/58.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 58/69
Results – Changed Their Mind
• Changed their mind during password creationTyped 8+ character password
Completely erased it
Saved a different password
usenixsec
iLIKEbunnies
Results Changed Their Mind
![Page 59: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/59.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 59/69
Results – Changed Their Mind
% w
h o c h a n g e
d m i n
d
0
10
20
30
40
50
60
Results Changed Their Mind
![Page 60: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/60.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 60/69
Results – Changed Their Mind
% w
h o c h a n g e
d m i n d
0
10
20
30
40
50
60
Results Changed Their Mind
![Page 61: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/61.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 61/69
Results – Changed Their Mind
% w
h o c h a n g e
d m i n d
0
10
20
30
40
50
60
Meters lead people to
change their mind duringpassword creation
Metric Memorability
![Page 62: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/62.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 62/69
Metric – Memorability
• Successful login about 5 minutes later and2+ days later
• Return rate
• Wrote password down, stored it, or pasted it
• No significant differences across conditionsfor any of these metrics
Metric – Sentiment
![Page 63: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/63.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 63/69
Metric – Sentiment
• Level of agreement with 14 statementsPassword creation (e.g., fun, difficult, annoying)Password meter (e.g., incorrect, high score important)
Results – Sentiment
![Page 64: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/64.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 64/69
Results – Sentiment
• Stringent meters a bit more annoying
• Stringent meters violated expectations
The Password Strength Meter Was Annoying
![Page 65: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/65.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 65/69
nudge-comp8
The Password Strength Meter Was Annoying
baseline meter
three-segmentgreen
tinyhuge
no suggestions
text-onlybunny
half-scoreone-third-score
nudge-16
text-only half-scorebold text-only half-score
Visual
Scoring
Visual &Scoring
Control
The Password Strength Meter Was Annoying
![Page 66: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/66.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 66/69
three-segmentgreen
nudge-comp8
The Password Strength Meter Was Annoying
13%
27%
40%34%
37%
tinyhuge
no suggestions
text-onlybunny
half-scoreone-third-score
nudge-16
text-only half-scorebold text-only half-score
Visual
Scoring
Visual &Scoring
Control baseline meter
Takeaway: Meters Matter
![Page 67: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/67.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 67/69
Takeaway: Meters Matter
• Meters lead to longer passwords
• Stringent meters reduce guessability
• Meters don’t affect memorability
• Overly stringent meters don’t add benefits May even backfire
Takeaway: What Makes Meters Matter
![Page 68: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/68.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 68/69
Takeaway: What Makes Meters Matter
• Important featuresScoring stringencyHaving a visual component
• Less important featuresColorSegmentation
SizeBunnyness
Takeaway: What Makes Meters Matter
![Page 69: How Does Your Password Measure Up](https://reader030.fdocuments.in/reader030/viewer/2022021320/577cd2a81a28ab9e7895bd11/html5/thumbnails/69.jpg)
8/13/2019 How Does Your Password Measure Up
http://slidepdf.com/reader/full/how-does-your-password-measure-up 69/69
Takeaway: What Makes Meters Matter
• Important featuresScoring stringencyHaving a visual component
• Less important featuresColorSegmentation
SizeBunnyness
Blase Ur ([email protected]),Patrick Gage Kelley, Saranga Komanduri,
Joel Lee, Michael Maass,Michelle L. Mazurek, Timothy Passaro,
Richard Shay, Timothy Vidas, Lujo Bauer,Nicolas Christin, Lorrie Faith Cranor
ThankYou!