Search papers, labs, and topics across Lattice.
MindReader is a novel tool that utilizes large language models (LLMs) to assist users in generating secure and memorable password replacements. By analyzing the semantic meaning of original password components, MindReader suggests new passwords that are both easy for users to remember and difficult for attackers to predict. A user study demonstrated that passwords generated by MindReader were significantly more secure against online guessing attacks compared to both original and alternative replacement passwords, while maintaining comparable memorability.
MindReader-generated passwords are not only more secure but also just as memorable, striking a crucial balance in password management.
We report on the design and evaluation of MindReader, a tool that helps a user replace her password when she is required to do so. Left to their own devices, users tend to replace their previous passwords with predictable variations of the original ones. MindReader leverages LLMs to suggest password variations that are chosen to be easy for the user to remember but harder for an attacker to predict. To do this, MindReader infers the meaning behind original password components and then suggests semantically related (yet syntactically unrelated) components for the new password. In a user study, passwords created using MindReader were more secure than both replacement passwords created without using MindReader and original passwords. In particular, MindReader replacement passwords were harder to guess in an online attack than alternative replacement passwords even by an attacker with knowledge of the original password and full knowledge of the tool implementation. Passwords created with MindReader were also comparably memorable to alternative replacement passwords and original passwords, as measured by the ability of users to successfully log in a week after creating their password.
