Breaking : password entry is fine

Pidel, Catie Jo; Neuhaus, Stephan

doi:10.1007/978-3-030-22351-9_5

Please use this identifier to cite or link to this item: https://doi.org/10.21256/zhaw-5036

Publication type:	Conference paper
Type of review:	Peer review (publication)
Title:	Breaking : password entry is fine
Authors:	Pidel, Catie Jo Neuhaus, Stephan
DOI:	10.1007/978-3-030-22351-9_5 10.21256/zhaw-5036
Proceedings:	HCI for Cybersecurity, Privacy and Trust
Conference details:	21st International Conference on Human-Computer Interaction, Orlando, USA, 26-31 July 2019
Issue Date:	2019
Series:	Lecture Notes in Computer Science
Series volume:	11594
Publisher / Ed. Institution:	Springer
ISBN:	978-3-030-22350-2 978-3-030-22351-9
Language:	English
Subjects:	Security; Password; Usability; Data entry error; Mobile security
Subject (DDC):	005: Computer programming, programs and data
Abstract:	In our digital world, we have become well acquainted with the login form – username shown as plaintext, password shown as asterisks or dots. This design dates back to the early days of terminal computing, and despite huge changes in nearly every other area, the humble login form remains largely untouched. When coupled with the ubiquity of smartphones, this means we often find ourselves entering complex passwords on a tiny touchscreen keyboard with little or no visual feedback on what has been typed. This paper explores how password masking on mobile devices affects the error rate for password entry. We created an app where users entered selected passwords into masked and unmasked password fields, measuring things like typing speed, error rate, and number of backspaces. We then did an exploratory data analysis for the data, and our findings show that, perhaps unexpectedly, there is no significant difference between masked and unmasked passwords for any of these metrics.
URI:	https://digitalcollection.zhaw.ch/handle/11475/15598
Fulltext version:	Accepted version
License (according to publishing contract):	Licence according to publishing contract
Departement:	School of Engineering
Organisational Unit:	Institute of Computer Science (InIT)
Appears in collections:	Publikationen School of Engineering

Files in This Item:

File	Description	Size	Format
2019_Pidel_Breaking.pdf		195.67 kB	Adobe PDF	View/Open

Show full item record

Pidel, C. J., & Neuhaus, S. (2019). Breaking : password entry is fine. HCI for Cybersecurity, Privacy and Trust. https://doi.org/10.1007/978-3-030-22351-9_5

Pidel, C.J. and Neuhaus, S. (2019) ‘Breaking : password entry is fine’, in HCI for Cybersecurity, Privacy and Trust. Springer. Available at: https://doi.org/10.1007/978-3-030-22351-9_5.

C. J. Pidel and S. Neuhaus, “Breaking : password entry is fine,” in HCI for Cybersecurity, Privacy and Trust, 2019. doi: 10.1007/978-3-030-22351-9_5.

PIDEL, Catie Jo und Stephan NEUHAUS, 2019. Breaking : password entry is fine. In: HCI for Cybersecurity, Privacy and Trust. Conference paper. Springer. 2019. ISBN 978-3-030-22350-2

Pidel, Catie Jo, and Stephan Neuhaus. 2019. “Breaking : Password Entry Is Fine.” Conference paper. In HCI for Cybersecurity, Privacy and Trust. Springer. https://doi.org/10.1007/978-3-030-22351-9_5.

Pidel, Catie Jo, and Stephan Neuhaus. “Breaking : Password Entry Is Fine.” HCI for Cybersecurity, Privacy and Trust, Springer, 2019, https://doi.org/10.1007/978-3-030-22351-9_5.