Passwords and single sign-on: Use, security, and understanding for online accounts

scite shows how a scientific paper has been cited by providing the context of the citation, a classification describing whether it supports, mentions, or contrasts the cited claim, and a label indicating in which section the citation was made.

Header Abstract Content Author and article information REFERENCES Comments

Record: found
Abstract: found
Conference Proceedings: found

Is Open Access

Passwords and single sign-on: Use, security, and understanding for online accounts

Published

proceedings-article

Author(s): Helen Petrie , Gayathri Sreekumar

Publication date (Print): July 2024

Conference name: 37th International BCS Human-Computer Interaction Conference (BCS HCI 24)

Conference theme: The International BCS Human-Computer Interaction Conference in 2024 was supported by the BCS Interactions Special Interest Group and hosted by the University of Central Lancashire in Preston. The BCS HCI Conference welcomed submissions on all aspects of human-computer interaction. Topics included: user experience (UX), usability testing, interaction design (IxD), human-centred AI (HCAI), education, health, sustainability, the Internet of Things (IoT), interaction technologies, and emerging interactive applications.

Conference date: 15–17 July 2024

Keywords: Online authentication procedures, Single Sign-On, Passwords, Users’ understanding

Bookmark

Abstract

Content

Author and article information

Contributors

Helen Petrie

Gayathri Sreekumar

Conference

Publication date: July 2024

Publication date (Print): July 2024

Pages: 172-181

Affiliations

[0001]University of York

York YO10 5GH, UK

Article

DOI: 10.14236/ewic/BCSHCI2024.16

SO-VID: 7a27a1c9-94a6-43e1-b90e-57dd7b28715f

License:

This work is licensed under a Creative Commons Attribution 4.0 Unported License. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/

Conference name: 37th International BCS Human-Computer Interaction Conference

Conference acronym: BCS HCI 24

Conference number: 37

Conference location: University of Central Lancashire (UCLan)

Conference date: 15–17 July 2024

Conference sponsor: Electronic Workshops in Computing (eWiC)

History

Product

1477-9358 BCS Learning & Development

Self URI (article page): https://www.scienceopen.com/hosted-document?doi=10.14236/ewic/BCSHCI2024.16

Self URI (journal page): https://ewic.bcs.org/

REFERENCES

ArianezhadM., CampL. J., KelleyT., & StebilaD. (2013). Comparative eye tracking of experts and novices in web single sign-on. Proceedings of the third ACM Conference on Data and Application Security and Privacy. ACM Press.
BalashD.G., WuX., GrantM., ReyesI., & AvivA.J. (2022). Security and privacy perceptions of third-party application access for Google accounts. Proceedings of the 31st USENIX Security Symposium.
BauerL., Bravo-LilloC., FragkakiE., & MelicherW. (2013). A comparison of users' perceptions of and willingness to use Google, Facebook, and Google+ single-sign-on functionality Proceedings of the 2013 ACM Workshop on Digital Identity Management. ACM Press.
BrostoffS., JennettC., MalheirosM., & SasseM.A. (2013). Federated identity to access egovernment services: are citizens ready for this? Proceedings of the 2013 ACM Workshop on Digital Identity Management. ACM Press.
ChoE., KimJ., & SundarS.S. (2020). Will You Log into Tinder using your Facebook Account? Adoption of Single Sign-On for Privacy-Sensitive Apps. ACM Conference on Human Factors in Computing Systems. ACM Press.
DaugmanJ. (2009). Iris Recognition at Airports and Border-Crossings. In S.LiZ. & JainA. (Eds.), Encyclopaedia of Biometrics. Springer. EgelmanS. My profile is my password, verify me! the privacy/convenience tradeoff of Facebook connect Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, Paris, France. (2013). 8
GafniR. & NissimD. (2014). To social login or not login? Exploring factors affecting the decision. Informing Science and Information Technology, 11, 57 – 72.
JiangJ. (2018). Social login acceptance: a DIF study of differential factors. 22nd Pacific Asia Conference on Information Systems. Association for Information Systems.
MorkondaS.G., ChiassonS., & van OorschotP.C. Influences of displaying permission-related information on web single sign-on login decisions. Computers & Security, 139, 103666 (2024)
NordPass Security. (2024). Top 200 most common passwords. https://nordpass.com/most-commonpasswords-list/ [accessed 6 April 2024]
Office for National Statistics (2023). Education, England and Wales: Census 2021. Available at: https://www.ons.gov.uk/peoplepopulationandco mmunity/educationandchildcare/bulletins/educationenglandandwales/census2021#highest-levelof-qualification [accessed 6 April 2024]
OrneM.T. (1962). On the social psychology of the psychological experiment: with particular reference to the demand characteristics and their implications. American Psychologist, 17, 776–783.
PetrieH., SreekumarG., & ShahandashtiS. (2024). Understanding users’ mental models of Federated Identity Management (FIM): use of a new tangible elicitation method. Proceedings of IFIP International Symposium on Human Aspects of Information Security & Assurance (HAISA 2024). Springer.
PratamaA.R., FirmansyahF.M., & RahmaF. (2022). Security awareness of single sign-on account in the academic community: the roles of demographics, privacy concerns, and Big-Five personality. PeerJ Computer Science, 8:e918.
RuotiS., RobertsB., & SeamonsK. (2015). Authentication Melee: A Usability Analysis of Seven Web Authentication Systems. Proceedings of the 24th International Conference on World Wide Web.
SchechterS. E., DhamijaR., OzmentA., & FischerI. (2007). The Emperor's New Security Indicators Proceedings of the 2007 IEEE Symposium on Security and Privacy. IEEE.
SotirakopoulosA., HawkeyK., & BeznosovK. (2010). “I did it because I trusted you”: Challenges with the study environment biasing participant behaviors. SOUPS Usable Security Experiment Reports (USER) Workshop.
SotirakopoulosA., HawkeyK., & BeznosovK. (2011). On the challenges in usable security lab studies: lessons learned from replicating a study on SSL warnings. Proceedings of the Seventh Symposium on Usable Privacy and Security.
StobertE., & BiddleR. (2018). The Password Life Cycle. ACM Transactions on Privacy and Security, 21(3), Article 13.
SunS.-T., PospisilE., MuslukhovI., DindarN., HawkeyK., & BeznosovK. (2011). OpenIDenabled browser: towards usable and secure web single sign-on. ACM Conference on Human Factors in Computing Systems. ACM Press.
SunS.-T., PospisilE., MuslukhovI., DindarN., HawkeyK., & BeznosovK. (2011). What makes users refuse web single sign-on? an empirical investigation of OpenID. Proceedings of the Seventh Symposium on Usable Privacy and Security.
SunS.-T., PospisilE., MuslukhovI., DindarN., HawkeyK., & BeznosovK. (2013). Investigating Users’ Perspectives of Web Single Sign-On: Conceptual Gaps and Acceptance Model. ACM Transactions on Internet Technologies, 13(1), Article 2.

Comments

Comment on this article

[1] ArianezhadM., CampL. J., KelleyT., & StebilaD. (2013). Comparative eye tracking of experts and novices in web single sign-on. Proceedings of the third ACM Conference on Data and Application Security and Privacy. ACM Press.

[2] BalashD.G., WuX., GrantM., ReyesI., & AvivA.J. (2022). Security and privacy perceptions of third-party application access for Google accounts. Proceedings of the 31st USENIX Security Symposium.

[3] BauerL., Bravo-LilloC., FragkakiE., & MelicherW. (2013). A comparison of users' perceptions of and willingness to use Google, Facebook, and Google+ single-sign-on functionality Proceedings of the 2013 ACM Workshop on Digital Identity Management. ACM Press.

[4] BrostoffS., JennettC., MalheirosM., & SasseM.A. (2013). Federated identity to access egovernment services: are citizens ready for this? Proceedings of the 2013 ACM Workshop on Digital Identity Management. ACM Press.

[5] ChoE., KimJ., & SundarS.S. (2020). Will You Log into Tinder using your Facebook Account? Adoption of Single Sign-On for Privacy-Sensitive Apps. ACM Conference on Human Factors in Computing Systems. ACM Press.

[6] DaugmanJ. (2009). Iris Recognition at Airports and Border-Crossings. In S.LiZ. & JainA. (Eds.), Encyclopaedia of Biometrics. Springer. EgelmanS. My profile is my password, verify me! the privacy/convenience tradeoff of Facebook connect Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, Paris, France. (2013). 8

[7] GafniR. & NissimD. (2014). To social login or not login? Exploring factors affecting the decision. Informing Science and Information Technology, 11, 57 – 72.

[8] JiangJ. (2018). Social login acceptance: a DIF study of differential factors. 22nd Pacific Asia Conference on Information Systems. Association for Information Systems.

[9] MorkondaS.G., ChiassonS., & van OorschotP.C. Influences of displaying permission-related information on web single sign-on login decisions. Computers & Security, 139, 103666 (2024)

[10] NordPass Security. (2024). Top 200 most common passwords. https://nordpass.com/most-commonpasswords-list/ [accessed 6 April 2024]

[11] Office for National Statistics (2023). Education, England and Wales: Census 2021. Available at: https://www.ons.gov.uk/peoplepopulationandco mmunity/educationandchildcare/bulletins/educationenglandandwales/census2021#highest-levelof-qualification [accessed 6 April 2024]

[12] OrneM.T. (1962). On the social psychology of the psychological experiment: with particular reference to the demand characteristics and their implications. American Psychologist, 17, 776–783.

[13] PetrieH., SreekumarG., & ShahandashtiS. (2024). Understanding users’ mental models of Federated Identity Management (FIM): use of a new tangible elicitation method. Proceedings of IFIP International Symposium on Human Aspects of Information Security & Assurance (HAISA 2024). Springer.

[14] PratamaA.R., FirmansyahF.M., & RahmaF. (2022). Security awareness of single sign-on account in the academic community: the roles of demographics, privacy concerns, and Big-Five personality. PeerJ Computer Science, 8:e918.

[15] RuotiS., RobertsB., & SeamonsK. (2015). Authentication Melee: A Usability Analysis of Seven Web Authentication Systems. Proceedings of the 24th International Conference on World Wide Web.

[16] SchechterS. E., DhamijaR., OzmentA., & FischerI. (2007). The Emperor's New Security Indicators Proceedings of the 2007 IEEE Symposium on Security and Privacy. IEEE.

[17] SotirakopoulosA., HawkeyK., & BeznosovK. (2010). “I did it because I trusted you”: Challenges with the study environment biasing participant behaviors. SOUPS Usable Security Experiment Reports (USER) Workshop.

[18] SotirakopoulosA., HawkeyK., & BeznosovK. (2011). On the challenges in usable security lab studies: lessons learned from replicating a study on SSL warnings. Proceedings of the Seventh Symposium on Usable Privacy and Security.

[19] StobertE., & BiddleR. (2018). The Password Life Cycle. ACM Transactions on Privacy and Security, 21(3), Article 13.

[20] SunS.-T., PospisilE., MuslukhovI., DindarN., HawkeyK., & BeznosovK. (2011). OpenIDenabled browser: towards usable and secure web single sign-on. ACM Conference on Human Factors in Computing Systems. ACM Press.

[21] SunS.-T., PospisilE., MuslukhovI., DindarN., HawkeyK., & BeznosovK. (2011). What makes users refuse web single sign-on? an empirical investigation of OpenID. Proceedings of the Seventh Symposium on Usable Privacy and Security.

[22] SunS.-T., PospisilE., MuslukhovI., DindarN., HawkeyK., & BeznosovK. (2013). Investigating Users’ Perspectives of Web Single Sign-On: Conceptual Gaps and Acceptance Model. ACM Transactions on Internet Technologies, 13(1), Article 2.

UK Computing Summit 2025: Navigating change (surviving and beyond) - 29-30 April @ Sheffield Hallam University - Register here.

Passwords and single sign-on: Use, security, and understanding for online accounts

Contributors

Conference

Affiliations

Article

History

Product

Categories

Comment on this article