Studying the Impact of Managers on Password Strength and Reuse
summary
Large-scale study combines 476 survey participants with 170 browser-plugin users to measure real passwords (average 10 accounts, 6 distinct passwords). Findings: about 70% reuse and average strength zxcvbn 2.2/4. Entry method matters: Chrome autofill shows >80% reuse while LastPass/pasted entries show ~22% reuse but pasted passwords are surprisingly unique yet weak. Regression shows password generators plus digital entry produce stronger, less-reused passwords; Chrome autofill alone correlates with increased reuse.
AI-written summary · about
chapters (7)
- 0:00Study motivation and scope
- 4:39Methodology
- 8:48Entry method observations
- 12:37User strategies
- 14:29Regression analysis results
- 17:59Conclusion and future work
- 20:29Q&A session
related talks
21mEverything but the User: Reducing Password Reuse
40mAre Password Managers Improving our Password Habits?
18mEffective password management
12mThe more accounts I use, the less I have to think': A Longitudinal Study on the...
24mWhy people (don’t) use password managers effectively
10mDo Password Managers Nudge Secure (Random) Passwords?
23mFantastic Passwords and Where to Find Them
24mUsability vs. Security. Can they live together?