TY - GEN
T1 - Understanding and Improving User Adoption and Security Awareness in Password Checkup Services
AU - Oh, Sanghak
AU - Baek, Heewon
AU - Huh, Jun Ho
AU - Kim, Taeyoung
AU - Jeon, Woojin
AU - Oakley, Ian
AU - Kim, Hyoungshick
N1 - Publisher Copyright:
© 2025 Copyright held by the owner/author(s).
PY - 2025/4/26
Y1 - 2025/4/26
N2 - Password checkup services (PCS) identify compromised, reused, or weak passwords, helping users secure at-risk accounts. However, adoption rates are low. We investigated factors influencing PCS use and password change challenges via an online survey (n=238). Key adoption factors were "perceived usefulness,""ease of use,"and "self efficacy."We also identified barriers to changing compromised passwords, including alert fatigue, low perceived urgency, and reliance on other security measures. We then designed interfaces mitigating these issues through clearer messaging and automation (e.g., simultaneous password changes and direct links to change pages). A user study (N=50) showed our designs significantly improved password change success rates, reaching 40% and 74% in runtime alert and PCS checkup reporting scenarios, respectively (compared to 16% and 60% with a baseline).
AB - Password checkup services (PCS) identify compromised, reused, or weak passwords, helping users secure at-risk accounts. However, adoption rates are low. We investigated factors influencing PCS use and password change challenges via an online survey (n=238). Key adoption factors were "perceived usefulness,""ease of use,"and "self efficacy."We also identified barriers to changing compromised passwords, including alert fatigue, low perceived urgency, and reliance on other security measures. We then designed interfaces mitigating these issues through clearer messaging and automation (e.g., simultaneous password changes and direct links to change pages). A user study (N=50) showed our designs significantly improved password change success rates, reaching 40% and 74% in runtime alert and PCS checkup reporting scenarios, respectively (compared to 16% and 60% with a baseline).
KW - Password Change
KW - Password Checkup Service
KW - Password Manager
UR - https://www.scopus.com/pages/publications/105005713832
U2 - 10.1145/3706598.3713284
DO - 10.1145/3706598.3713284
M3 - Conference contribution
AN - SCOPUS:105005713832
T3 - Conference on Human Factors in Computing Systems - Proceedings
BT - CHI 2025 - Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems
PB - Association for Computing Machinery
T2 - 2025 CHI Conference on Human Factors in Computing Systems, CHI 2025
Y2 - 26 April 2025 through 1 May 2025
ER -