{"id":"https://openalex.org/W4311165853","doi":"https://doi.org/10.1145/3564625.3567981","title":"User Perceptions of Five-Word Passwords","display_name":"User Perceptions of Five-Word Passwords","publication_year":2022,"publication_date":"2022-12-03","ids":{"openalex":"https://openalex.org/W4311165853","doi":"https://doi.org/10.1145/3564625.3567981"},"language":"en","primary_location":{"id":"doi:10.1145/3564625.3567981","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3564625.3567981","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079441570","display_name":"Xiaoyuan Wu","orcid":"https://orcid.org/0000-0003-2198-5067"},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaoyuan Wu","raw_affiliation_strings":["Computer Science, The George Washington University, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-2198-5067","affiliations":[{"raw_affiliation_string":"Computer Science, The George Washington University, United States of America","institution_ids":["https://openalex.org/I193531525"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052232889","display_name":"Collins W. Munyendo","orcid":"https://orcid.org/0000-0003-1987-1685"},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Collins W. Munyendo","raw_affiliation_strings":["Computer Science, The George Washington University, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-1987-1685","affiliations":[{"raw_affiliation_string":"Computer Science, The George Washington University, United States of America","institution_ids":["https://openalex.org/I193531525"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052890072","display_name":"Eddie Cosic","orcid":"https://orcid.org/0000-0002-3653-6822"},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eddie Cosic","raw_affiliation_strings":["Computer Science, The George Washington University, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-3653-6822","affiliations":[{"raw_affiliation_string":"Computer Science, The George Washington University, United States of America","institution_ids":["https://openalex.org/I193531525"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066831664","display_name":"Genevieve A. Flynn","orcid":null},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Genevieve A. Flynn","raw_affiliation_strings":["Computer Science, The George Washington University, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-4566-5009","affiliations":[{"raw_affiliation_string":"Computer Science, The George Washington University, United States of America","institution_ids":["https://openalex.org/I193531525"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000063907","display_name":"Olivia Legault","orcid":"https://orcid.org/0000-0003-4275-222X"},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Olivia Legault","raw_affiliation_strings":["Computer Science, The George Washington University, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-4275-222X","affiliations":[{"raw_affiliation_string":"Computer Science, The George Washington University, United States of America","institution_ids":["https://openalex.org/I193531525"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009788320","display_name":"Adam J. Aviv","orcid":"https://orcid.org/0000-0002-3792-2485"},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adam J. Aviv","raw_affiliation_strings":["Computer Science, The George Washington University, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-3792-2485","affiliations":[{"raw_affiliation_string":"Computer Science, The George Washington University, United States of America","institution_ids":["https://openalex.org/I193531525"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.956,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.81483858,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"605","last_page":"618"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13155","display_name":"Digital Communication and Language","score":0.9675999879837036,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.9496273994445801},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7185656428337097},{"id":"https://openalex.org/keywords/cognitive-password","display_name":"Cognitive password","score":0.6901898980140686},{"id":"https://openalex.org/keywords/password-policy","display_name":"Password policy","score":0.6612048149108887},{"id":"https://openalex.org/keywords/word","display_name":"Word (group theory)","score":0.6264206171035767},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.6103060245513916},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.47009846568107605},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.44950684905052185},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.4259694516658783},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3222964107990265},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.1703437864780426},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.16910147666931152},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.07827785611152649}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.9496273994445801},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7185656428337097},{"id":"https://openalex.org/C23875713","wikidata":"https://www.wikidata.org/wiki/Q5141232","display_name":"Cognitive password","level":5,"score":0.6901898980140686},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.6612048149108887},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.6264206171035767},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.6103060245513916},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.47009846568107605},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44950684905052185},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.4259694516658783},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3222964107990265},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.1703437864780426},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.16910147666931152},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.07827785611152649},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3564625.3567981","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3564625.3567981","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5400000214576721,"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education"}],"awards":[{"id":"https://openalex.org/G4038457429","display_name":null,"funder_award_id":"1845300","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1987516957","https://openalex.org/W1995628302","https://openalex.org/W2006809639","https://openalex.org/W2014833947","https://openalex.org/W2025448348","https://openalex.org/W2030112111","https://openalex.org/W2044798763","https://openalex.org/W2048755632","https://openalex.org/W2089241088","https://openalex.org/W2091833612","https://openalex.org/W2097267243","https://openalex.org/W2111397260","https://openalex.org/W2149929743","https://openalex.org/W2155873597","https://openalex.org/W2171920515","https://openalex.org/W2208343689","https://openalex.org/W2218132318","https://openalex.org/W2254621492","https://openalex.org/W2256695479","https://openalex.org/W2394619600","https://openalex.org/W2610414453","https://openalex.org/W2611670505","https://openalex.org/W2793573497","https://openalex.org/W2795673503","https://openalex.org/W2795675112","https://openalex.org/W2800032164","https://openalex.org/W2801242599","https://openalex.org/W2891114826","https://openalex.org/W2936467198","https://openalex.org/W2969468676","https://openalex.org/W2998818221","https://openalex.org/W3097523736","https://openalex.org/W3111051420","https://openalex.org/W3154021468","https://openalex.org/W3204765815","https://openalex.org/W4225001029"],"related_works":["https://openalex.org/W2969720675","https://openalex.org/W2936467198","https://openalex.org/W1982158666","https://openalex.org/W78975431","https://openalex.org/W2596869006","https://openalex.org/W4214849386","https://openalex.org/W2203557291","https://openalex.org/W2115218409","https://openalex.org/W143386018","https://openalex.org/W2090949570"],"abstract_inverted_index":{"Human-chosen":[0],"passwords":[1,98,108,117,135,137,140,161],"are":[2,51,99,118],"often":[3],"short,":[4],"selected":[5,86],"non-uniformly,":[6],"and":[7,81,102,175],"thus,":[8],"susceptible":[9],"to":[10,17,143,170],"automated":[11],"guessing":[12],"attacks.":[13],"To":[14],"help":[15],"users":[16,50,109],"select":[18,110],"more":[19,100,104,120,166],"secure":[20,105,121],"but":[21],"memorable":[22],"passwords,":[23,48],"experts":[24],"have":[25],"recommended":[26],"the":[27,131],"use":[28],"of":[29,31,115,133,150],"passphrases":[30],"multiple":[32],"words":[33,55],"or":[34],"phrases.":[35],"In":[36],"this":[37],"paper,":[38],"we":[39],"explore":[40],"a":[41,57,60,74,87,123],"strategy":[42],"for":[43,56,164],"passphrase":[44],"selection,":[45],"so-called":[46],"five-word":[47,88,97,107,116,134,160],"where":[49],"assigned":[52],"five":[53],"random":[54],"passphrase.":[58],"Such":[59],"password":[61,89,155],"composition":[62],"policy":[63],"was":[64],"recently":[65],"adopted":[66],"at":[67],"Georgetown":[68],"University":[69],"in":[70],"December":[71],"2020.":[72],"Through":[73],"two-part":[75],"online":[76],"survey":[77],"(n":[78],"=":[79,83],"150":[80],"n":[82],"116),":[84],"participants":[85,127,151],"under":[90],"different":[91],"conditions.":[92],"We":[93],"find":[94],"that":[95],"computer-generated":[96],"diverse":[101],"likely":[103,119],"than":[106,122],"themselves.":[111],"While":[112,159],"all":[113],"cases":[114],"human-generated,":[124],"traditional":[125],"password,":[126],"expressed":[128],"misconceptions":[129],"regarding":[130],"security":[132,173],"(and":[136],"generally).":[138],"Five-word":[139],"also":[141],"appear":[142],"negatively":[144],"impact":[145],"usability,":[146],"only":[147],"39.7":[148],"%":[149],"successfully":[152],"recalled":[153],"their":[154,172],"after":[156],"two":[157],"weeks.":[158],"offer":[162],"improvements":[163],"security,":[165],"outreach":[167],"is":[168],"needed":[169],"explain":[171],"benefits":[174],"reduce":[176],"usability":[177],"burdens.":[178]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}