Who creates strong passwords when nudging fails

The use of strong passwords is viewed as a recommended cybersecurity practice, as the hacking of weak passwords led to major cybersecurity breaches. The present research investigated whether nudging with messages based on participants’ self-schemas could lead them to create stronger passwords. We mo...

Full description

Bibliographic Details
Main Authors: Chan-Tin, D.E (Author), Jones, I.T (Author), Kennison, S.M (Author), Spooner, V.H (Author)
Format: Article
Language:English
Published: Elsevier Ltd 2021
Subjects:
Online Access:View Fulltext in Publisher
LEADER 02278nam a2200241Ia 4500
001 10.1016-j.chbr.2021.100132
008 220427s2021 CNT 000 0 und d
020 |a 24519588 (ISSN) 
245 1 0 |a Who creates strong passwords when nudging fails 
260 0 |b Elsevier Ltd  |c 2021 
856 |z View Fulltext in Publisher  |u https://doi.org/10.1016/j.chbr.2021.100132 
520 3 |a The use of strong passwords is viewed as a recommended cybersecurity practice, as the hacking of weak passwords led to major cybersecurity breaches. The present research investigated whether nudging with messages based on participants’ self-schemas could lead them to create stronger passwords. We modeled our study on prior health-related research demonstrating positive results using messages based on self-schema categories (i.e., True Colors categories -compassionate, loyal, intellectual, and adventurous). We carried out an online study, one with 256 (185 women, 66 men, 5 other) undergraduates and one with 424 (240 men, 179 women, 5 other) Amazon Mechanical Turk (MTurk) workers, in which we randomly assigned participants to receive messages that matched or mismatched their self-schema. We also investigated whether differences across the Big Five personality traits, secure password knowledge, attitudes and behavior, need for cognition, and general risk-taking predicted the strength of passwords that participants created during the study. Multiple individual difference variables predicted password strength (i.e., conscientiousness, emotional stability, need for cognition, self-reported secure password knowledge, attitude, and behavior, and general risk-taking). MTurk workers had higher levels of cybersecurity knowledge and created stronger passwords than college students. The nudging messages did not lead to stronger passwords. Implications for strategies to increase the use of secure passwords are discussed. © 2021 
650 0 4 |a Cybersecurity 
650 0 4 |a Nudging 
650 0 4 |a Personality traits 
650 0 4 |a Risk-taking 
650 0 4 |a Secure passwords 
650 0 4 |a Self-schemas 
700 1 |a Chan-Tin, D.E.  |e author 
700 1 |a Jones, I.T.  |e author 
700 1 |a Kennison, S.M.  |e author 
700 1 |a Spooner, V.H.  |e author 
773 |t Computers in Human Behavior Reports