Why People - Don't - Use Password Managers Effectively

Explore the reasons behind low adoption rates and ineffective use of password managers in this 24-minute conference talk from USENIX SOUPS 2019. Dive into a comprehensive study involving 30 participants, examining the mindsets of users who employ no password tools, built-in browser managers, and separately installed password managers. Discover the differences in motivation between convenience-driven users of built-in tools and security-focused users of separate managers. Learn about barriers to adoption, password habits, and usage patterns across different user groups. Gain insights into tailored design approaches and actionable suggestions to improve password manager adoption and effectiveness. Understand the complexities of user behavior and attitudes towards password security tools in this informative presentation by researchers from Carnegie Mellon University.

Intro
TS Cybersecurity 101: Why you need to use a password manager
Purposive sampling: Three types of users
Instead of password tools, they used
Password habits
Barriers to adopting password tools
12 people using built-in password management tools
Password usage
Barriers to effective use of built-in tools
7 people using separately installed password management tools
Attitudes
Q: Why are password manager adoption rates so low? And what can we do?
Q: Why don't people use password managers effectively? And what can we do?
Why people (don't) use password managers effectively