User Password Generation Practices and Strong Password Guideline Compliance

Abstract

This study investigated the common password generation practices of online users. Three hundred and fifteen undergraduate and graduate college-age students completed a survey querying; internet usage demographics; the types and number of different password protected accounts maintained; actual practices used in generating, storing and using passwords; what practices users believe that they should use in generating and storing passwords; and general demographic information. Results indicate that, in general, users do not vary the complexity of passwords depending on the nature of the site or change their passwords on a regular basis if not required by the site. In generating passwords users typically report using (1) lower case letters, (2) numbers or digits, (3) personally meaningful numbers and (4) personally meaningful words.

Get full access to this article

View all access options for this article.

References

Bishop

Kline

D.V.

(1995). Improving system security via proactive password checking. Computers & Security, 14, 233–249.

Lida-Rogers

, (2004). Development of the internet experience scale: Investigating the relationships between cognitive, affective, and conative components of internet experience. Unpublished doctoral dissertation, Wichita State University, Kansas.

Lightner

(2003). What users want in e-commerce design: Effects of age, education and income. Ergonomics, 46, 153–168.

Luo

(2002). Trust production and privacy concerns on the internet: A framework based on relationship marketing and social exchange theory. Industrial Marketing Management, 31, 111–118.

Tabachnick

B. G.

Fidell

L. S.

(2001). Computer-assisted research design and analysis. Boston: Allyn & Bacon.

K. -P. L.

Bhargav

Procter

R.W.

(2003). Imposing password restrictions for multiple accounts: Impact on generation and recall of passwords. Proceedings of the 47^th annual meeting of the Human Factors and Ergonomics Society (pp. 1331–1335). Santa Monica, CA: HFES.