Two studies of the perceptions of risk, benefits and likelihood of undertaking password management behaviours

Burak Merdenyan and Helen Petrie

Behaviour and Information Technology, 2022, vol. 41, issue 12, 2514-2527

Abstract: Passwords remain the most common form of authentication in the digital world. People have increasing numbers of passwords, and many people undertake risky password management behaviours such as re-using passwords, writing them down and sharing them. It is unclear whether people persist in these behaviours because they do not understand the risks involved or the benefits of the behaviour outweigh the risk. Two studies investigated the relationships between people's perceptions of the risks and benefits of a range of password management behaviours and their self-reports of their likelihood of undertaking them. The first study involved 120 MTurkers in the U.S.A., the second study involved 128 respondents from 26 different countries including approximately 50% students. In both studies, respondents took rated the risks, benefits and likelihood of undertaking 15 password management behaviours. The two very different samples provided very similar results, validating our classification of password management behaviours into four components: Storing, Sharing, Loggingn and Change behaviours. Somecomponents were more affected by perceptions of the benefits, others were equally affected by the perceptions of the risks and the benefits. These results have implications for how information about risky password behaviours is presented to users and general education about password security.

Date: 2022
References: Add references at CitEc
Citations:

Downloads: (external link)
http://hdl.handle.net/10.1080/0144929X.2021.2019832 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:taf:tbitxx:v:41:y:2022:i:12:p:2514-2527

Ordering information: This journal article can be ordered from
http://www.tandfonline.com/pricing/journal/tbit20

DOI: 10.1080/0144929X.2021.2019832

Access Statistics for this article

Behaviour and Information Technology is currently edited by Dr Panos P Markopoulos

More articles in Behaviour and Information Technology from Taylor & Francis Journals
Bibliographic data for series maintained by Chris Longhurst ().