“I just stopped using one and started using the other”: Motivations, Techniques, and Challenges When Switching Password Managers

Collins W. Munyendo, Peter Mayer, Adam J. Aviv

Publikation: Kapitel i bog/rapport/konference-proceedingKonferencebidrag i proceedingsForskningpeer review

Abstract

This paper explores what motivates password manager (PM) users in the US to switch from one PM to another, the techniques they employ when switching, and challenges they encounter throughout. Through a screener (n = 412) followed by a main survey (n = 54), we find that browser-based PMs are the most widely used, with most of these users motivated to use the PM due to convenience. Most participants that switch PMs do so for usability reasons, but are also motivated by cost, as third-party PMs' full suite of features often require a subscription fee. Some PM-switchers are also motivated by recent security breaches, such as what was reported at LastPass in the Fall of 2022, with some participants losing trust in LastPass and PMs generally as a result. Those that switch mostly employ manual techniques of moving their passwords, e.g., copying and pasting their credentials from their previous to their new PM, despite most PMs offering ways to automatically transfer credentials in bulk across PMs. Assistance during the switching process is limited, with less than half of participants that switched receiving guidance during the switching process. From these findings, we make recommendations to PMs that can improve their overall user experience and use, including eliciting and acting on regular feedback from users as well as making PM settings more easily reachable and customizable by end-users.

OriginalsprogEngelsk
TitelCCS 2023 - Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security
ForlagAssociation for Computing Machinery
Publikationsdatonov. 2023
Sider3123-3137
ISBN (Elektronisk)9798400700507
DOI
StatusUdgivet - nov. 2023
Begivenhed30th ACM SIGSAC Conference on Computer and Communications Security, CCS 2023 - Copenhagen, Danmark
Varighed: 26. nov. 202330. nov. 2023

Konference

Konference30th ACM SIGSAC Conference on Computer and Communications Security, CCS 2023
Land/OmrådeDanmark
ByCopenhagen
Periode26/11/202330/11/2023
SponsorACM Special Interest Group on Security, Audit and Control (SIGSAC)

Fingeraftryk

Dyk ned i forskningsemnerne om '“I just stopped using one and started using the other”: Motivations, Techniques, and Challenges When Switching Password Managers'. Sammen danner de et unikt fingeraftryk.

Citationsformater