Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This study investigates the cognitive biases and behavioral factors that lead users to adopt insecure password practices, despite increased awareness of cybersecurity risks. By integrating concepts from behavioral economics, such as hyperbolic discounting and status quo bias, the research reveals that users often prioritize convenience and memorability over password strength. Key findings indicate that psychological biases significantly contribute to security procrastination, highlighting the need for user-friendly authentication policies that align with actual decision-making behaviors.
Users prioritize convenience over security, often choosing weak passwords due to cognitive biases that hinder effective password management.
Despite increasing awareness of cybersecurity risks, users continue to engage in insecure password practices, such as reusing passwords, choosing weak credentials, and neglecting security recommendations. The study explores the behavioral and cognitive factors that influence password decision-making by integrating insights from behavioral economics, particularly hyperbolic discounting, status quo bias, and present bias. We conducted a survey to analyze how people create, store and manage their passwords, examining whether security habits have improved over time in response to greater awareness. Our findings reveal that immediate convenience often outweighs long-term security considerations, leading users to prioritize memorability over strength. Additionally, we identify key psychological biases that contribute to security procrastination and resistance to adopting more secure authentication practices, such as password managers and multi-factor authentication. The study contributes to human-centered security by bridging the gap between security awareness and action, offering practical insights to design user-friendly authentication policies that align with real-world decision-making tendencies.