Do Password Managers Nudge Secure (Random) Passwords?
summary
Study of n = 558 web users compares Chrome, Firefox, and Safari browser nudges and finds Safari significantly more likely to produce an accepted random password. Safari auto-populates an 18-character default prefill, shows a pop-up highlighting strength and autofill, and visually emphasizes the last characters. Acceptance correlates with noticed the nudge and prior use of a generator, while prior password manager use and site password policy (1c8 vs 3c12) show no effect.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:18Motivation
- 1:59Chrome Nudge
- 2:26Firefox Nudge
- 2:37Safari Nudge
- 3:35What are the Rationales of Users to (not) Adopt a RGPs?
- 4:41Study Structure
- 5:12RGP Adoption Rate
- 6:19Noticing the Nudge - RGP Adoption
- 7:47Password Policy
- 8:04Qualitative Analysis
- 9:38Questions?
related talks
10mDissecting Nudges in Password Managers: Simple Defaults are Powerful
18mEffective password management
26mStudying the Impact of Managers on Password Strength and Reuse
40mAre Password Managers Improving our Password Habits?
12mProspects for Improving Password Selection
47mThe state of passwordless auth on the web
39mHow iOS Encourages Healthy Password Practices
19mDesign and Evaluation of a Data-Driven Password Meter