People's Bad Password Habits exposed

Psychology researchers have studied how people choose passwords and confirm security experts worst fears.

Alan Brown of Southern Methodist University and three colleagues surveyed 218 first-year psychology undergraduates. Most participants reported using themselves for inspiration when it came to choosing passwords, with 45% using their own name for at least one password.

Security experts advise against using one password for different things, yet such duplication was common. Experts also warn against writing down passwords, yet more than half the sample admitted writing theirs down.

The survey revealed that students have 8.18 password uses. With 4.45 different passwords to cover these functions, the average password has 1.84 applications.

Specifically:
* Two thirds of passwords are designed around one's personal characteristics, with most of the remainder relating to relatives, friends or lovers.
* Proper names and birthdays are the primary information used in constructing passwords, accounting for about half of all password constructions.
* Almost all respondents reuse passwords, and about two thirds of password uses are duplications.
* Passwords have been forgotten by a third of respondents, and over half keep a written record of them.

The researchers say: 'We found empirical confirmation of some bad password practices discussed in the literature.' They provide suggestions for password construction and use, such as categorising passwords into those that need to be high security and those that don't. For those that do, they advise using a 'cryptic transformation of some memorable cue; mix letters and symbols and test your password recall a day or two after composing it and prior to using it'.

Brown, A.S., Bracken, E., Zoccoli, S. & Douglas, K. (2004). Generating and remembering passwords. Applied Cognitive Psychology, 18, 641-651.

All change at the top for System Concepts
Source: System Concepts Ltd, 3 July 2009
 
Leslie Fountain has been promoted to joint Managing Director of leading usability consultancy System Concepts.

Life in UCD immortalised in fiction: you couldn't make it up
Source: UN, 2 July 2009
 
Sarah Herman's fictitious book on life in a user-centred design company has hit the shelves and The Guardian's book pages...

Interfaces Magazine - Issue 79: The Education Issue
Source: Interaction Group, 1 July 2009
 
The latest issue of Interfaces is now available as a free download from the Interaction Website.

Two new Behavioural research Tools from Noldus
Source: UN, 30 June 2009
 
Tool updates make on-site behavioural data collection easier.

Cell Phones that Listen and Learn
Source: MIT Technology Review, 29 June 2009
 
New software tracks a user's behavior by monitoring everyday sounds.

Top Six Don’ts for Usability Testing
Source: FutureNow Inc., 27 June 2009
 
Six tips for creating quality usability tests to ensure useful feedback from testers.

Usability: ‘Lovely software. But I can’t work it’
Source: FT.com, 26 June 2009
 
In a recent survey by Global Graphics, 77 per cent of office workers estimate they lose up to one hour a week because business software is difficult to use.

And what do you do?
Source: Dexo Design, 25 June 2009
 
How do you describe your job role? Here are the results of a recent 'Preferred UX/UI Title' Poll.

Most Doctors cite Usability as critical to Electronic Health Record Adoption
Source: TMCNet, 24 June 2009
 
It's all about 'meaningful use'.

Glossy monitors look good but can hurt
Source: QUT, 23 June 2009
 
A new advisory cites research which suggests high gloss monitors make users sit awkwardly.