Everything but the User: Reducing Password Reuse
summary
A study collects 24 notifications found and runs two user surveys (180 and 588 respondents) plus manual coding of five leaked datasets (top 1,000 passwords each). Results show 60% thought hacked and only a minority blame reuse; four of six representative notifications never mention reuse. Manual analysis finds between one and six of the top ten passwords per site reference the service. The work outlines concrete wording and UI changes and cites a forthcoming cryptographic reuse‑check proposal.
AI-written summary · about
chapters (7)
- 0:00Introduction to passwords
- 1:34History of usability
- 3:45The problem of reuse
- 7:20Analyzing reuse notifications
- 11:02User perception of security
- 12:59Password patterns study
- 18:19Future security solutions
related talks
26mStudying the Impact of Managers on Password Strength and Reuse
12mThe more accounts I use, the less I have to think': A Longitudinal Study on the...
46mRequiem for the Password
01h 05mPasswords are not going away
43m"Analysis of the "10 billion" aka Collection #1 password leak"
23mFantastic Passwords and Where to Find Them
25mPasswords Still? New Data on Consumer Authentication Habits
30mhunter2: A Symphony of Password Horror