@inproceedings{discovery20251, year = {2001}, booktitle = {Proceedings of (CHI '01) Extended Abstracts on Human Factors in Computing Systems}, address = {USA: New York}, publisher = {ACM}, volume = {2001}, title = {Persuasive Password Security}, note = {This version is the author accepted manuscript. For information on re-use, please refer to the publisher's terms and conditions.}, series = {(CHI) Extended Abstracts on Human Factors in Computing Systems}, pages = {139 -- 140}, editor = {Marilyn (Mantei) Tremaine}, author = {Weiricb, D and Sasse, MA}, abstract = {Users of password-protected systems have to be persuaded to follow certain regulations to keep systems secure. This paper describes the results of a first study of the mental models, metaphors, attitudes and skills users hold with respect to password mechanisms. It shows that users are currently not motivated to adopt proper password practices. They do not believe that they ultimately can stop somebody from getting into the system, or that somebody getting in could cause them any serious personal harm. We recommend a novel approach to the design of training and online support, which is based on an appropriate use of fear appeals.}, url = {http://dx.doi.org/10.1145/634067.634152} }