Explore chapters and articles related to this topic
Password Management
Published in Kutub Thakur, Al-Sakib Khan Pathan, Cybersecurity Fundamentals, 2020
Kutub Thakur, Al-Sakib Khan Pathan
A password manager is a software application that offers the services to create a strong password and manage all those passwords in encrypted format so that they are not prone to compromise. A good password manager allows the user to save the encrypted password either in the cloud or on the local drives. Online storage of passwords in the cloud is easy to access it from anywhere in the world, but the passwords saved locally are a bit difficult to access from other locations.
On improving the memorability of system-assigned recognition-based passwords
Published in Behaviour & Information Technology, 2022
Mahdi Nasrullah Al-Ameen, Sonali T. Marne, Kanis Fatema, Matthew Wright, Shannon Scielzo
In this section, we report on a pilot field study that we conducted for a 56-bit version of the GraphicV scheme. A scheme offering 56-bit passwords, also called cryptographic passwords (Biddle, Chiasson, and Van Oorschot 2012; Bonneau and Schechter 2014), provides much greater resistance against guessing than the 20-bit version of the scheme. This higher level of protection is important for high-stakes scenarios, such as a password for enterprise login or as a master key to protect other credentials, e.g. in a password manager (Bonneau and Schechter 2014). We note that 20 bits is considered sufficient against online guessing attacks, which is sufficient protection for most uses (Florêncio, Herley, and Van Oorschot 2014).
Two studies of the perceptions of risk, benefits and likelihood of undertaking password management behaviours
Published in Behaviour & Information Technology, 2022
Software systems known as password managers are also used by password holders as a strategy to manage their various passwords. Password managers are another form of cognitive off-loading, as users only need to remember one password and can create many strong passwords without having to remember them or write them down (Chiasson, Oorschot, and van Biddle 2006). Users only have to manage a master password, to access and use their other passwords in their password manager. However, the consequences of forgetting the master password might be catastrophic (Bonneau et al. 2012).