Effective and efficient methodologies are essential for developing and maintaining information systems that are both secure and usable, especially in the case of Internet applications that require a combined effort from application, system, network, security, and human-computer interaction design areas. In this paper, we propose a user-centric approach towards achieving "usable security". As a case study we apply the proposed approach on the password management problem. Our work demonstrates that the "user-centric usable security" is a viable and promising future research direction.