Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Journal Article

Must I, can I? I don’t understand your ambiguous password rules

Published: March 13, 2017
Citation: Information & Computer Security vol. 25, no. 1, pp. 80-99

Author(s)

Kristen Greene (NIST), Yee-Yin Choong (NIST)

Abstract

Keywords

usability; password policies; password requirements; password rule language; usable security; user comprehension
Control Families

None selected

Documentation

Publication:
https://doi.org/10.1108/ICS-06-2016-0043
Download URL
Accepted Author Manuscript (pdf)

Supplemental Material:
None available

Document History:
03/13/17: Journal Article (Final)

Topics

Security and Privacy

passwords, usability