TY - GEN
T1 - I'm too busy to reset my LinkedIn password
T2 - 2017 ACM SIGCHI Conference on Human Factors in Computing Systems, CHI 2017
AU - Huh, Jun Ho
AU - Kim, Hyoungshick
AU - Rayala, Swathi S.V.P.
AU - Bobba, Rakesh B.
AU - Beznosov, Konstantin
N1 - Publisher Copyright:
© 2017 ACM.
PY - 2017/5/2
Y1 - 2017/5/2
N2 - A common security practice used to deal with a password breach is locking user accounts and sending out an email to tell users that they need to reset their password to unlock their account. This paper evaluates the effectiveness of this security practice based on the password reset email that LinkedIn sent out around May 2016, and through an online survey conducted on 249 LinkedIn users who received that email. Our evaluation shows that only about 46% of the participants reset their passwords. The mean time taken to reset password was 26.3 days, revealing that a significant proportion of the participants reset their password a few weeks, or even months after first receiving the email. Our findings suggest that more effective persuasive measures need to be added to convince users to reset their password in a timely manner, and further reduce the risks associated with delaying password resets.
AB - A common security practice used to deal with a password breach is locking user accounts and sending out an email to tell users that they need to reset their password to unlock their account. This paper evaluates the effectiveness of this security practice based on the password reset email that LinkedIn sent out around May 2016, and through an online survey conducted on 249 LinkedIn users who received that email. Our evaluation shows that only about 46% of the participants reset their passwords. The mean time taken to reset password was 26.3 days, revealing that a significant proportion of the participants reset their password a few weeks, or even months after first receiving the email. Our findings suggest that more effective persuasive measures need to be added to convince users to reset their password in a timely manner, and further reduce the risks associated with delaying password resets.
KW - LinkedIn
KW - Password breach
KW - Password reset
KW - Reset email
UR - https://www.scopus.com/pages/publications/85044864522
U2 - 10.1145/3025453.3025788
DO - 10.1145/3025453.3025788
M3 - Conference contribution
AN - SCOPUS:85044864522
T3 - Conference on Human Factors in Computing Systems - Proceedings
SP - 387
EP - 391
BT - CHI 2017 - Proceedings of the 2017 ACM SIGCHI Conference on Human Factors in Computing Systems
PB - Association for Computing Machinery
Y2 - 6 May 2017 through 11 May 2017
ER -