6 years, 1 month ago

A secure relationship with passwords means not being attached to how you pick them

When you are asked to create a password — either for a new online account or resetting login information for an existing account — you’re likely to choose a password you know you can remember. As a result, many computer systems force users to create new passwords regularly — say, every 30 or 45 days — and require every password to contain capital letters, numbers and punctuation characters even though federal experts advise against both of these practices. Training people to create secure passwords hasn’t made much of a difference to overall password security on the internet. The endowment effect Our research has identified another explanation for why people choose weak passwords: People feel that they own, and are emotionally attached to, the way they usually create passwords. We provided a scenario where “Terry” derides “Pat’s” password creation routine, and then asked people how they thought Pat would react.

Salon

Discover Related