On password behaviours and attitudes in different populations. (April 2019)

• Record Type: Journal Article
• Authors: Alomari, Ruba; Thorpe, Julie
• Is Part Of: Journal of information security and applications. Volume 45(2019)
• Page Start: 79
• Page End: 89
• Publication Date: 2019-04
• Subjects: Empirical studies -- Passwords -- Authentication -- User behaviour -- User studies; Computer security -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.jisa.2018.12.008
• Languages: English
• ISSNs: 2214-2126

Abstract

Abstract: We explore the differences in password behaviours and attitudes of samples of university students, IT professionals, and the general population (non-student and non-IT professional). Currently, text-based password authentication is the most commonly deployed user authentication mechanism, despite numerous alternatives. Passwords are thus a popular research topic, where many password studies are done in universities where the majority of participants are students. Many studies also do not differentiate between IT professionals and others. Thus, we aim to gain insights about the effect of focusing on samples from university students and/or IT professionals. We conducted a 100-participant online user study involving three sessions over 8 − 10 days. The study tasks involved password creation and password recall. We also surveyed participant's password-related behaviours and preferences for different authentication methods. Our results provide insights about the effect of using a large proportion of university students and/or IT professionals in password studies. Our findings should be of interest to the research community and also provide useful data to authentication system designers regarding user preferences and attitudes.