Let’s Hash: Helping Developers with Password Security
summary
Researchers build a small website that supplies ready-to-use authentication code and a guided wizard UI and run a between-subjects study with 179 freelance developers solving three password tasks. Users given Let's Hash snippets produce secure solutions 5–32× more often than a control group using their usual resources. Common failures are missing proper cryptographic randomness and using outdated hashes like MD5. The wizard version shows no significant usability gain and development of the wizard is paused, while the snippet library proves effective.
AI-written summary · about
chapters (4)
related talks
49mSalt Your Password Well: Password Hashes on the Web
05mCode Reviewing as Methodology for Online Security Studies with Developers - A Case
22mHash It Out: Teaching Password Security Through Code
05mReplication: On the Ecological Validity of Online Security Developer Studies
27mKeeping passwords safe in 2017
46mCryptography For Beginners
30mhunter2: A Symphony of Password Horror
59mHack Yourself First