As passwords remain the main online authentication method, focus has shifted from naive
entropy to how usability improvements can increase security. Chatterjee et al. recently …

As passwords remain the main online authentication method, focus has shifted from naive
entropy to how usability improvements can increase security. Chatterjee et al. recently …

Despite recent advances in biometric authentication [39] and account linking [4], passwords
are still the main method of authentication used online and will probably remain so in the …

Password checking systems traditionally allow login only if the correct password is
submitted. Recent work on typo-tolerant password checking suggests that usability can be …

We provide the first treatment of typo-tolerant password authentication for arbitrary user-
selected passwords. Such a system, rather than simply rejecting a login attempt with an …

Credential leaks still happen with regular frequency, and show evidence that, despite
decades of warnings, password hashing is still not correctly implemented in practice. The …

We implement and test a simple typo tolerant password authentication scheme as well as its
personalised counterpart. Our experiments measure the security loss and give examples of …

Users are often educated to follow different forms of advice from security experts. For
example, using a password manager is considered an effective way to maintain a unique …

Password managers are important tools that enable us to use stronger passwords, freeing
us from the cognitive burden of remembering them. Despite this, there are still many users …

Password-authenticated key exchange (PAKE) enables a user to authenticate to a server by
proving the knowledge of the password without actually revealing their password to the …