Augmenting Password Strength Meter Design Using the Elaboration Likelihood Model: Evidence from Randomized Experiments

Warut Khern-am-nuai (), Matthew J. Hashim (), Alain Pinsonneault (), Weining Yang () and Ninghui Li ()
Additional contact information
Warut Khern-am-nuai: Desautels Faculty of Management, McGill University, Montreal, Quebec H3A 1G5, Canada
Matthew J. Hashim: Eller College of Management, University of Arizona, Tucson, Arizona 85721
Alain Pinsonneault: Desautels Faculty of Management, McGill University, Montreal, Quebec H3A 1G5, Canada
Weining Yang: ByteDance Inc., Mountain View, California 94041
Ninghui Li: Department of Computer Science, Purdue University, West Lafayette, Indiana 47907

Information Systems Research, 2023, vol. 34, issue 1, 157-177

Abstract: Password-based authentication is the most commonly used method for gaining access to secured systems. Unfortunately, empirical evidence highlights the fact that most passwords are significantly weak, and encouraging users to create stronger passwords is a significant challenge. In this research, we propose a theoretically augmented password strength meter design that is guided by the elaboration likelihood model of persuasion (ELM). We evaluate our design by leveraging three independent and complementary methods: a survey-based experiment using students to evaluate the saliency of our conceptual design (proof of concept), a controlled laboratory experiment conducted on Amazon Mechanical Turk to test the effectiveness of the proposed design (proof of value), and a randomized field experiment conducted in collaboration with an online forum in Asia to establish proof of use. In each study, we observe the changes in users’ behavior in response to our proposed password strength meter. We find that the ELM-augmented password strength meter is significantly effective at addressing the challenges of password-based authentication. Users exposed to this strength meter are more likely to change their passwords, leading to a new password that is significantly stronger. Our findings suggest that the proposed design of augmented password strength meters is an effective method for promoting secure password behavior among end users.

Keywords: password strength meter; design science; elaboration likelihood model; randomized experiment (search for similar items in EconPapers)
Date: 2023
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (1)

Downloads: (external link)
http://dx.doi.org/10.1287/isre.2022.1125 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:inm:orisre:v:34:y:2023:i:1:p:157-177

Access Statistics for this article

More articles in Information Systems Research from INFORMS Contact information at EDIRC.
Bibliographic data for series maintained by Chris Asher ().