Design and Evaluation of a Data-Driven Password Meter
summary
A client-side password meter combines compact neural networks to estimate guessability with a regression-weighted set of 21 characteristics that generate concrete text feedback and suggested password edits. A 4,509-participant online experiment finds the data-driven meter yields materially stronger passwords under a common 8-character composition policy while memorability does not decrease. Code and a live demo are open-sourced, and the meter runs with only a few megabytes sent to the browser.
AI-written summary · about
chapters (6)
- 0:00Start
- 2:07How Do We Provide Data-Driven Feedback to Users
- 6:36Password Composition
- 7:03Stringency of Scoring
- 8:32Public Non Sensitive Feedback
- 12:22Participant Sentiment
related talks
32mzxcvbn: Low-Budget Password Strength Estimation
27mFast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks
24mUsability vs. Security. Can they live together?
12mProspects for Improving Password Selection
35mHuman Computation
19mForgetting of Passwords: Ecological Theory and Data
26mStudying the Impact of Managers on Password Strength and Reuse
10mImproving Password Generation Through the Design of a Password Composition Policy...
