{"id":"https://openalex.org/W1987516957","doi":"https://doi.org/10.1145/1837110.1837113","title":"Encountering stronger password requirements","display_name":"Encountering stronger password requirements","publication_year":2010,"publication_date":"2010-07-14","ids":{"openalex":"https://openalex.org/W1987516957","doi":"https://doi.org/10.1145/1837110.1837113","mag":"1987516957"},"language":"en","primary_location":{"id":"doi:10.1145/1837110.1837113","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1837110.1837113","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixth Symposium on Usable Privacy and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077826909","display_name":"Richard Shay","orcid":"https://orcid.org/0000-0002-9437-9802"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Richard Shay","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA","Carnegie-Mellon University, Pittsburgh, PA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048460404","display_name":"Saranga Komanduri","orcid":null},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saranga Komanduri","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA","Carnegie-Mellon University, Pittsburgh, PA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018021084","display_name":"Patrick Gage Kelley","orcid":"https://orcid.org/0000-0003-4405-0010"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Patrick Gage Kelley","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA","Carnegie-Mellon University, Pittsburgh, PA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014350811","display_name":"Pedro Giovanni Leon","orcid":null},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pedro Giovanni Leon","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA","Carnegie-Mellon University, Pittsburgh, PA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5105206771","display_name":"Michelle L. Mazurek","orcid":"https://orcid.org/0000-0003-4151-6428"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michelle L. Mazurek","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA","Carnegie-Mellon University, Pittsburgh, PA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002939847","display_name":"Lujo Bauer","orcid":"https://orcid.org/0000-0002-8209-6792"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lujo Bauer","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA","Carnegie-Mellon University, Pittsburgh, PA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078075278","display_name":"Nicolas Christin","orcid":"https://orcid.org/0000-0002-2506-8031"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nicolas Christin","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA","Carnegie-Mellon University, Pittsburgh, PA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072760035","display_name":"Lorrie Faith Cranor","orcid":"https://orcid.org/0000-0003-2125-0124"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lorrie Faith Cranor","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA","Carnegie-Mellon University, Pittsburgh, PA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I74973139"],"apc_list":null,"apc_paid":null,"fwci":12.2541,"has_fulltext":false,"cited_by_count":311,"citation_normalized_percentile":{"value":0.99029245,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"20"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9624000191688538,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10803","display_name":"Innovative Human-Technology Interaction","score":0.9524999856948853,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.9475013017654419},{"id":"https://openalex.org/keywords/password-policy","display_name":"Password policy","score":0.8598859310150146},{"id":"https://openalex.org/keywords/cognitive-password","display_name":"Cognitive password","score":0.8306760787963867},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7680914998054504},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.6393920183181763},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5914709568023682},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5208873748779297},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.509573221206665},{"id":"https://openalex.org/keywords/s/key","display_name":"S/KEY","score":0.48364341259002686},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.43456465005874634},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4198623299598694},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.329757958650589}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.9475013017654419},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.8598859310150146},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.8306760787963867},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7680914998054504},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.6393920183181763},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5914709568023682},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5208873748779297},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.509573221206665},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.48364341259002686},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.43456465005874634},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4198623299598694},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.329757958650589},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1837110.1837113","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1837110.1837113","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixth Symposium on Usable Privacy and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3212259001","display_name":null,"funder_award_id":"DGE-0903659","funder_id":"https://openalex.org/F4320337368","funder_display_name":"Division of Graduate Education"},{"id":"https://openalex.org/G864484945","display_name":null,"funder_award_id":"DAAD-19-02-1-0389","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"}],"funders":[{"id":"https://openalex.org/F4320337368","display_name":"Division of Graduate Education","ror":"https://ror.org/00whkrf32"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W47516667","https://openalex.org/W581604922","https://openalex.org/W1560225191","https://openalex.org/W1582097881","https://openalex.org/W1582830784","https://openalex.org/W1600614774","https://openalex.org/W2009226705","https://openalex.org/W2038368865","https://openalex.org/W2041404167","https://openalex.org/W2045591401","https://openalex.org/W2047917391","https://openalex.org/W2053030258","https://openalex.org/W2055147133","https://openalex.org/W2100142573","https://openalex.org/W2121386924","https://openalex.org/W2123097583","https://openalex.org/W2128531630","https://openalex.org/W2150341374","https://openalex.org/W2171920515","https://openalex.org/W2978725006","https://openalex.org/W3007880749","https://openalex.org/W4214501820","https://openalex.org/W4285719527","https://openalex.org/W4298423176","https://openalex.org/W6633398236","https://openalex.org/W6635705217","https://openalex.org/W6740917271"],"related_works":["https://openalex.org/W2969720675","https://openalex.org/W2359085393","https://openalex.org/W4221040820","https://openalex.org/W2385370155","https://openalex.org/W4317418593","https://openalex.org/W2916013051","https://openalex.org/W3125785768","https://openalex.org/W2021087413","https://openalex.org/W2596766976","https://openalex.org/W2182949018"],"abstract_inverted_index":{"Text-based":[0],"passwords":[1],"are":[2,99],"still":[3],"the":[4,26,59,71,83,88],"most":[5,81],"commonly":[6],"used":[7],"authentication":[8],"mechanism":[9],"in":[10,25,140,159],"information":[11],"systems.":[12],"We":[13,65,123],"took":[14],"advantage":[15],"of":[16,45,63,82,151],"a":[17,22,92,120],"unique":[18],"opportunity":[19],"presented":[20],"by":[21,87],"significant":[23],"change":[24,39],"Carnegie":[27],"Mellon":[28],"University":[29],"(CMU)":[30],"computing":[31],"services":[32],"password":[33,121,143],"policy":[34,74,153],"that":[35,97,145],"required":[36],"users":[37,84,127],"to":[38,58,90,115,132,161],"their":[40,133],"passwords.":[41,64,134],"Through":[42],"our":[43,112],"survey":[44],"470":[46],"CMU":[47],"computer":[48],"users,":[49],"we":[50,104],"collected":[51],"data":[52],"about":[53,70],"behaviors":[54],"and":[55,61,109],"practices":[56],"related":[57,131],"use":[60],"creation":[62],"also":[66,124,156],"captured":[67],"users'":[68,157],"opinions":[69],"new,":[72],"stronger":[73],"requirements.":[75],"Our":[76,135],"analysis":[77,108],"shows":[78],"that,":[79],"although":[80],"were":[85],"annoyed":[86],"need":[89],"create":[91],"complex":[93],"password,":[94],"they":[95,98],"believe":[96],"now":[100],"more":[101],"secure.":[102],"Furthermore,":[103],"perform":[105],"an":[106],"entropy":[107],"discuss":[110],"how":[111,126],"findings":[113],"relate":[114],"NIST":[116],"recommendations":[117],"for":[118],"creating":[119],"policy.":[122],"examine":[125],"answer":[128],"specific":[129,152],"questions":[130],"results":[136],"can":[137],"be":[138],"helpful":[139],"designing":[141],"better":[142],"policies":[144],"consider":[146],"not":[147],"only":[148],"technical":[149],"aspects":[150],"rules,":[154],"but":[155],"behavior":[158],"response":[160],"those":[162],"rules.":[163]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":15},{"year":2021,"cited_by_count":21},{"year":2020,"cited_by_count":21},{"year":2019,"cited_by_count":25},{"year":2018,"cited_by_count":24},{"year":2017,"cited_by_count":25},{"year":2016,"cited_by_count":33},{"year":2015,"cited_by_count":31},{"year":2014,"cited_by_count":28},{"year":2013,"cited_by_count":27},{"year":2012,"cited_by_count":16}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}