Are Password Managers Improving our Password Habits?
summary
Study recruits 2,491 initial respondents then filters down to 109 validated dashboards from desktop-capable users. About two thirds report using some form of password manager; Chrome accounts dominate but 79% of Chrome users do not accept generated passwords while roughly half of third‑party users do. Many master passwords are reused, and between two thirds and three quarters of participants have weak or reused passwords that “should be replaced.” Roughly half report not knowing their manager’s dashboard existed.
AI-written summary · about
chapters (11)
- 0:00Start
- 2:28Password Management: A Brief History
- 3:51Password Habits in 2006 (Florencio & Herley)
- 8:43Assumptions Made in Recommending Password Managers
- 9:23Prior Work Examining these Assumptions
- 11:24Christian Hercules
- 12:41qualification): "Which password manager are you using..."
- 14:07Filtering: Users of Password Managers with "Dashboards"
- 15:14for those who qualified in Qi): How long have you been using a password manager?
- 17:23Participants' Journeys
- 26:12Do you expect to use your password manager's security dashboard in the future?
related talks
18mEffective password management
26mStudying the Impact of Managers on Password Strength and Reuse
24mWhy people (don’t) use password managers effectively
12mThe more accounts I use, the less I have to think': A Longitudinal Study on the...
12m"Would You Give the Same Priority to the Bank and a Game? I Do Not!"
10mDo Password Managers Nudge Secure (Random) Passwords?
21mEverything but the User: Reducing Password Reuse
41mThe state of passwordless auth on the web