Of passwords and people: measuring the effect of password-composition policies
Of passwords and people: measuring the effect of password-composition policies
Saranga Komanduri,Richard Shay,5 Authors,Serge Egelman
2011 · DOI: 10.1145/1978942.1979321
International Conference on Human Factors in Computing Systems · 472 Citations
TLDR
A large-scale study investigates password strength, user behavior, and user sentiment across four password-composition policies, and describes the predictability of passwords by calculating their entropy, finding that a number of commonly held beliefs about password composition and strength are inaccurate.