SlideShare una empresa de Scribd logo
1 de 66
Descargar para leer sin conexión
UX of Passwords
I’m Claire
from Blink.
Venmo
1.  Current password UX
2.  How it can be improved
3.  The future of passwords
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
What if your identity
was stolen?
Let me tell
you about
Steve.
1. Freeze bank accounts
2. Open new accounts
3. Set fraud alert on SS#
4. Repayment pending an investigation
5. Reset auto-withdrawal accounts
What have we heard
makes passwords secure?
8+ characters
1+ numbers
1+ symbols
Camp 1	
   Camp 2	
  
A really, really
long string
Why two camps?
My Hypothesis:	
  
Camp 1	
   Camp 2	
  
Humans are not good
at being random.
1	
  	
  	
  	
  123456	
  (Unchanged	
  from	
  2013)	
  	
  
2	
  	
  	
  	
  password	
  (Unchanged)	
  	
  
3	
  	
  	
  	
  12345	
  (Up	
  17)	
  	
  
4	
  	
  	
  	
  12345678	
  (Down	
  1)	
  	
  
5	
  	
  	
  	
  qwerty	
  (Down	
  1)	
  	
  
6	
  	
  	
  	
  1234567890	
  (Unchanged)	
  	
  
7	
  	
  	
  	
  1234	
  (Up	
  9)	
  	
  
8	
  	
  	
  	
  baseball	
  (New)	
  	
  
9	
  	
  	
  	
  dragon	
  (New)	
  	
  
10	
  	
  	
  football	
  (New)	
  	
  
11	
  	
  	
  1234567	
  (Down	
  4)	
  	
  
12	
  	
  	
  monkey	
  (Up	
  5)	
  	
  
13  letmein	
  (Up	
  1)	
  	
  
14	
  	
  	
  	
  abc123	
  (Down	
  9)	
  	
  
15	
  	
  	
  	
  111111	
  (Down	
  8)	
  	
  
16	
  	
  	
  	
  mustang	
  (New)	
  	
  
17	
  	
  	
  	
  access	
  (New)	
  	
  
18	
  	
  	
  	
  shadow	
  (Unchanged)	
  	
  
19	
  	
  	
  	
  master	
  (New)	
  	
  
20	
  	
  	
  	
  michael	
  (New)	
  	
  
21	
  	
  	
  	
  superman	
  (New)	
  	
  
22	
  	
  	
  	
  696969	
  (New)	
  	
  
23	
  	
  	
  	
  123123	
  (Down	
  12)	
  	
  
24	
  	
  	
  	
  batman	
  (New)	
  	
  
25	
  	
  	
  	
  trustno1	
  (Down	
  1)	
  
Most Common Passwords:	
  
hGp://www.splashdata.com/	
  	
  
Do people feel secure
online?
300 People	
   4 Questions	
  Across the U.S.	
  
I asked…
Knowledge of Hacks
Password Habits
Reasons for Changing Passwords
So what?
Passwords are
broken!
We are responsible for
a better password UX.
Ideas for improving
current password UX.
Poor	
  Security	
  
&	
  Good	
  UX	
  
Good	
  Security	
  
&	
  Poor	
  UX	
  
1. Make
security a
priority.
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
2. Make
“Change
Password”
prominent.
Changing iCloud Password
1Password
 Dashlane
3. Remind
users to
change their
password
every 6
months.
4. Provide 
2-step
verification.
“GeQng	
  into	
  Amazon	
  let	
  my	
  
hackers	
  get	
  into	
  my	
  Apple	
  ID	
  
account,	
  which	
  helped	
  them	
  
get	
  into	
  Gmail,	
  which	
  gave	
  
them	
  access	
  to	
  TwiGer.	
  Had	
  I	
  
used	
  two-­‐factor	
  
authenZcaZon	
  for	
  my	
  Google	
  
account	
  ,	
  it’s	
  possible	
  that	
  
none	
  of	
  this	
  would	
  have	
  
happened.”	
  	
  
-­‐	
  MaG	
  Honan,	
  WIRED	
  
“he	
  very	
  four	
  digits	
  that	
  
Amazon	
  considers	
  
unimportant	
  enough	
  to	
  
display	
  in	
  the	
  clear	
  on	
  the	
  
web	
  are	
  precisely	
  the	
  same	
  
ones	
  that	
  Apple	
  considers	
  
secure	
  enough	
  to	
  perform	
  
idenZty	
  verificaZon.”	
  	
  
-­‐	
  MaG	
  Honan,	
  WIRED	
  
Digits
Google
Security Key
5. Incentivize good
security habits.
6. Advise users to
create long strings,
not random strings.
hGp://xkcd.com/936/	
  	
  
hGp://xkcd.com/936/	
  	
  
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
7. Show requirements
all the time.
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
8. Show password
characters.
“If people attempt to
recover a password
while checking out on a
e-commerce site, 75%
won’t complete their
purchase.” 
	
  
–	
  Jared	
  Spool	
  
“Masking passwords
doesn't even increase
security, but it does cost
you business due to
login failures.”

–	
  Nielsen	
  Norman	
  Group	
  
hGp://uxmovement.com/forms/why-­‐password-­‐masking-­‐can-­‐hurt-­‐your-­‐sign-­‐up-­‐form/	
  	
  
hGp://www.lukew.com/ff/entry.asp?1941	
  	
  
9. Timeout after five failed
login attempts.
10. Ask security questions
when a user calls customer
service and when a user logs
in from a new device or
network.
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
What does the future of
passwords look like?
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
UX of Passwords  |  Refresh Seattle  |  Claire Carlson
Nobody is 
hack-proof.
Don’t let
this happen
to your
users.
Where do you see
authentication
heading?
Thank you!
@TheNextUX

Más contenido relacionado

Similar a UX of Passwords | Refresh Seattle | Claire Carlson

Lesson Presentation Powerful Passwords.pptx
Lesson Presentation Powerful Passwords.pptxLesson Presentation Powerful Passwords.pptx
Lesson Presentation Powerful Passwords.pptxAllanGuevarra1
 
The Life of Breached Data & The Dark Side of Security
The Life of Breached Data & The Dark Side of SecurityThe Life of Breached Data & The Dark Side of Security
The Life of Breached Data & The Dark Side of SecurityJarrod Overson
 
Future of Identity, Data, and Wearable Security
Future of Identity, Data, and Wearable SecurityFuture of Identity, Data, and Wearable Security
Future of Identity, Data, and Wearable SecurityJonathan LeBlanc
 
Beyond The Padlock: New Ideas in Browser Security UI
Beyond The Padlock: New Ideas in Browser Security UIBeyond The Padlock: New Ideas in Browser Security UI
Beyond The Padlock: New Ideas in Browser Security UImozilla.presentations
 
Hushcon 2016 Keynote: Test for Echo
Hushcon 2016 Keynote: Test for EchoHushcon 2016 Keynote: Test for Echo
Hushcon 2016 Keynote: Test for EchoDeja vu Security
 
Deja vu security Adam Cecchetti - Security is a Snapshot in Time BSidesPDX ...
Deja vu security   Adam Cecchetti - Security is a Snapshot in Time BSidesPDX ...Deja vu security   Adam Cecchetti - Security is a Snapshot in Time BSidesPDX ...
Deja vu security Adam Cecchetti - Security is a Snapshot in Time BSidesPDX ...adamdeja
 
Online security: How to stay safe
Online security: How to stay safeOnline security: How to stay safe
Online security: How to stay safeDuc Le
 
Password management for you
Password management for youPassword management for you
Password management for youChit Ko Ko Win
 
Os Nightingale
Os NightingaleOs Nightingale
Os Nightingaleoscon2007
 
Human is an amateur; the monkey is an expert. How to stop trying to secure yo...
Human is an amateur; the monkey is an expert. How to stop trying to secure yo...Human is an amateur; the monkey is an expert. How to stop trying to secure yo...
Human is an amateur; the monkey is an expert. How to stop trying to secure yo...Vlad Styran
 
Hardware and the commerce revolution
Hardware and the commerce revolutionHardware and the commerce revolution
Hardware and the commerce revolutionCristiano Betta
 
MacMAD MacOS Security
MacMAD MacOS SecurityMacMAD MacOS Security
MacMAD MacOS Securitybos45
 
Password - Strong and Memorable Passwords
Password - Strong and Memorable PasswordsPassword - Strong and Memorable Passwords
Password - Strong and Memorable PasswordsN. M. Ali Hayder
 
Sept 2014 cloud security presentation
Sept 2014   cloud security presentationSept 2014   cloud security presentation
Sept 2014 cloud security presentationJoan Dembowski
 
Passwords: the weakest link in WordPress security
Passwords: the weakest link in WordPress securityPasswords: the weakest link in WordPress security
Passwords: the weakest link in WordPress securityjessepollak
 

Similar a UX of Passwords | Refresh Seattle | Claire Carlson (20)

Lesson Presentation Powerful Passwords.pptx
Lesson Presentation Powerful Passwords.pptxLesson Presentation Powerful Passwords.pptx
Lesson Presentation Powerful Passwords.pptx
 
The Life of Breached Data & The Dark Side of Security
The Life of Breached Data & The Dark Side of SecurityThe Life of Breached Data & The Dark Side of Security
The Life of Breached Data & The Dark Side of Security
 
Future of Identity, Data, and Wearable Security
Future of Identity, Data, and Wearable SecurityFuture of Identity, Data, and Wearable Security
Future of Identity, Data, and Wearable Security
 
Beyond The Padlock: New Ideas in Browser Security UI
Beyond The Padlock: New Ideas in Browser Security UIBeyond The Padlock: New Ideas in Browser Security UI
Beyond The Padlock: New Ideas in Browser Security UI
 
Hushcon 2016 Keynote: Test for Echo
Hushcon 2016 Keynote: Test for EchoHushcon 2016 Keynote: Test for Echo
Hushcon 2016 Keynote: Test for Echo
 
Deja vu security Adam Cecchetti - Security is a Snapshot in Time BSidesPDX ...
Deja vu security   Adam Cecchetti - Security is a Snapshot in Time BSidesPDX ...Deja vu security   Adam Cecchetti - Security is a Snapshot in Time BSidesPDX ...
Deja vu security Adam Cecchetti - Security is a Snapshot in Time BSidesPDX ...
 
Online security: How to stay safe
Online security: How to stay safeOnline security: How to stay safe
Online security: How to stay safe
 
Is this your Password
Is this your PasswordIs this your Password
Is this your Password
 
issue15
issue15issue15
issue15
 
Password management for you
Password management for youPassword management for you
Password management for you
 
Os Nightingale
Os NightingaleOs Nightingale
Os Nightingale
 
Password Manager
Password ManagerPassword Manager
Password Manager
 
Human is an amateur; the monkey is an expert. How to stop trying to secure yo...
Human is an amateur; the monkey is an expert. How to stop trying to secure yo...Human is an amateur; the monkey is an expert. How to stop trying to secure yo...
Human is an amateur; the monkey is an expert. How to stop trying to secure yo...
 
Hardware and the commerce revolution
Hardware and the commerce revolutionHardware and the commerce revolution
Hardware and the commerce revolution
 
MacMAD MacOS Security
MacMAD MacOS SecurityMacMAD MacOS Security
MacMAD MacOS Security
 
Password - Strong and Memorable Passwords
Password - Strong and Memorable PasswordsPassword - Strong and Memorable Passwords
Password - Strong and Memorable Passwords
 
The future ux of money
The future ux of moneyThe future ux of money
The future ux of money
 
Passwords
Passwords Passwords
Passwords
 
Sept 2014 cloud security presentation
Sept 2014   cloud security presentationSept 2014   cloud security presentation
Sept 2014 cloud security presentation
 
Passwords: the weakest link in WordPress security
Passwords: the weakest link in WordPress securityPasswords: the weakest link in WordPress security
Passwords: the weakest link in WordPress security
 

Último

Cold War Tensions Increase - 1945-1952.pptx
Cold War Tensions Increase - 1945-1952.pptxCold War Tensions Increase - 1945-1952.pptx
Cold War Tensions Increase - 1945-1952.pptxSamKuruvilla5
 
Construction Documents Checklist before Construction
Construction Documents Checklist before ConstructionConstruction Documents Checklist before Construction
Construction Documents Checklist before ConstructionResDraft
 
Khushi sharma undergraduate portfolio...
Khushi sharma undergraduate portfolio...Khushi sharma undergraduate portfolio...
Khushi sharma undergraduate portfolio...khushisharma298853
 
Math Group 3 Presentation OLOLOLOLILOOLLOLOL
Math Group 3 Presentation OLOLOLOLILOOLLOLOLMath Group 3 Presentation OLOLOLOLILOOLLOLOL
Math Group 3 Presentation OLOLOLOLILOOLLOLOLkenzukiri
 
How to use Ai for UX UI Design | ChatGPT
How to use Ai for UX UI Design | ChatGPTHow to use Ai for UX UI Design | ChatGPT
How to use Ai for UX UI Design | ChatGPTThink 360 Studio
 
Building+your+Data+Project+on+AWS+-+Luke+Anderson.pdf
Building+your+Data+Project+on+AWS+-+Luke+Anderson.pdfBuilding+your+Data+Project+on+AWS+-+Luke+Anderson.pdf
Building+your+Data+Project+on+AWS+-+Luke+Anderson.pdfsaidbilgen
 
Design mental models for managing large-scale dbt projects. March 21, 2024 in...
Design mental models for managing large-scale dbt projects. March 21, 2024 in...Design mental models for managing large-scale dbt projects. March 21, 2024 in...
Design mental models for managing large-scale dbt projects. March 21, 2024 in...Ed Orozco
 
Best-NO1 Pakistani Amil Baba Real Amil baba In Pakistan Najoomi Baba in Pakis...
Best-NO1 Pakistani Amil Baba Real Amil baba In Pakistan Najoomi Baba in Pakis...Best-NO1 Pakistani Amil Baba Real Amil baba In Pakistan Najoomi Baba in Pakis...
Best-NO1 Pakistani Amil Baba Real Amil baba In Pakistan Najoomi Baba in Pakis...Amil baba
 
Production of Erythromycin microbiology.pptx
Production of Erythromycin microbiology.pptxProduction of Erythromycin microbiology.pptx
Production of Erythromycin microbiology.pptxb2kshani34
 
The future of UX design support tools - talk Paris March 2024
The future of UX design support tools - talk Paris March 2024The future of UX design support tools - talk Paris March 2024
The future of UX design support tools - talk Paris March 2024Alan Dix
 
High-Quality Faux Embroidery Services | Cre8iveSkill
High-Quality Faux Embroidery Services | Cre8iveSkillHigh-Quality Faux Embroidery Services | Cre8iveSkill
High-Quality Faux Embroidery Services | Cre8iveSkillCre8iveskill
 
LRFD Bridge Design Specifications-AASHTO (2014).pdf
LRFD Bridge Design Specifications-AASHTO (2014).pdfLRFD Bridge Design Specifications-AASHTO (2014).pdf
LRFD Bridge Design Specifications-AASHTO (2014).pdfHctorFranciscoSnchez1
 
WCM Branding Agency | 210519 - Portfolio Review (F&B) -s.pptx
WCM Branding Agency | 210519 - Portfolio Review (F&B) -s.pptxWCM Branding Agency | 210519 - Portfolio Review (F&B) -s.pptx
WCM Branding Agency | 210519 - Portfolio Review (F&B) -s.pptxHasan S
 
Mike Tyson Sign The Contract Big Boy Shirt
Mike Tyson Sign The Contract Big Boy ShirtMike Tyson Sign The Contract Big Boy Shirt
Mike Tyson Sign The Contract Big Boy ShirtTeeFusion
 
UX Conference on UX Research Trends in 2024
UX Conference on UX Research Trends in 2024UX Conference on UX Research Trends in 2024
UX Conference on UX Research Trends in 2024mikailaoh
 
Introduce Trauma-Informed Design to Your Organization - CSUN ATC 2024
Introduce Trauma-Informed Design to Your Organization - CSUN ATC 2024Introduce Trauma-Informed Design to Your Organization - CSUN ATC 2024
Introduce Trauma-Informed Design to Your Organization - CSUN ATC 2024Ted Drake
 
Embroidery design from embroidery magazine
Embroidery design from embroidery magazineEmbroidery design from embroidery magazine
Embroidery design from embroidery magazineRivanEleraki
 
Designing for privacy: 3 essential UX habits for product teams
Designing for privacy: 3 essential UX habits for product teamsDesigning for privacy: 3 essential UX habits for product teams
Designing for privacy: 3 essential UX habits for product teamsBlock Party
 
Create Funeral Invites Online @ feedvu.com
Create Funeral Invites Online @ feedvu.comCreate Funeral Invites Online @ feedvu.com
Create Funeral Invites Online @ feedvu.comjakyjhon00
 

Último (19)

Cold War Tensions Increase - 1945-1952.pptx
Cold War Tensions Increase - 1945-1952.pptxCold War Tensions Increase - 1945-1952.pptx
Cold War Tensions Increase - 1945-1952.pptx
 
Construction Documents Checklist before Construction
Construction Documents Checklist before ConstructionConstruction Documents Checklist before Construction
Construction Documents Checklist before Construction
 
Khushi sharma undergraduate portfolio...
Khushi sharma undergraduate portfolio...Khushi sharma undergraduate portfolio...
Khushi sharma undergraduate portfolio...
 
Math Group 3 Presentation OLOLOLOLILOOLLOLOL
Math Group 3 Presentation OLOLOLOLILOOLLOLOLMath Group 3 Presentation OLOLOLOLILOOLLOLOL
Math Group 3 Presentation OLOLOLOLILOOLLOLOL
 
How to use Ai for UX UI Design | ChatGPT
How to use Ai for UX UI Design | ChatGPTHow to use Ai for UX UI Design | ChatGPT
How to use Ai for UX UI Design | ChatGPT
 
Building+your+Data+Project+on+AWS+-+Luke+Anderson.pdf
Building+your+Data+Project+on+AWS+-+Luke+Anderson.pdfBuilding+your+Data+Project+on+AWS+-+Luke+Anderson.pdf
Building+your+Data+Project+on+AWS+-+Luke+Anderson.pdf
 
Design mental models for managing large-scale dbt projects. March 21, 2024 in...
Design mental models for managing large-scale dbt projects. March 21, 2024 in...Design mental models for managing large-scale dbt projects. March 21, 2024 in...
Design mental models for managing large-scale dbt projects. March 21, 2024 in...
 
Best-NO1 Pakistani Amil Baba Real Amil baba In Pakistan Najoomi Baba in Pakis...
Best-NO1 Pakistani Amil Baba Real Amil baba In Pakistan Najoomi Baba in Pakis...Best-NO1 Pakistani Amil Baba Real Amil baba In Pakistan Najoomi Baba in Pakis...
Best-NO1 Pakistani Amil Baba Real Amil baba In Pakistan Najoomi Baba in Pakis...
 
Production of Erythromycin microbiology.pptx
Production of Erythromycin microbiology.pptxProduction of Erythromycin microbiology.pptx
Production of Erythromycin microbiology.pptx
 
The future of UX design support tools - talk Paris March 2024
The future of UX design support tools - talk Paris March 2024The future of UX design support tools - talk Paris March 2024
The future of UX design support tools - talk Paris March 2024
 
High-Quality Faux Embroidery Services | Cre8iveSkill
High-Quality Faux Embroidery Services | Cre8iveSkillHigh-Quality Faux Embroidery Services | Cre8iveSkill
High-Quality Faux Embroidery Services | Cre8iveSkill
 
LRFD Bridge Design Specifications-AASHTO (2014).pdf
LRFD Bridge Design Specifications-AASHTO (2014).pdfLRFD Bridge Design Specifications-AASHTO (2014).pdf
LRFD Bridge Design Specifications-AASHTO (2014).pdf
 
WCM Branding Agency | 210519 - Portfolio Review (F&B) -s.pptx
WCM Branding Agency | 210519 - Portfolio Review (F&B) -s.pptxWCM Branding Agency | 210519 - Portfolio Review (F&B) -s.pptx
WCM Branding Agency | 210519 - Portfolio Review (F&B) -s.pptx
 
Mike Tyson Sign The Contract Big Boy Shirt
Mike Tyson Sign The Contract Big Boy ShirtMike Tyson Sign The Contract Big Boy Shirt
Mike Tyson Sign The Contract Big Boy Shirt
 
UX Conference on UX Research Trends in 2024
UX Conference on UX Research Trends in 2024UX Conference on UX Research Trends in 2024
UX Conference on UX Research Trends in 2024
 
Introduce Trauma-Informed Design to Your Organization - CSUN ATC 2024
Introduce Trauma-Informed Design to Your Organization - CSUN ATC 2024Introduce Trauma-Informed Design to Your Organization - CSUN ATC 2024
Introduce Trauma-Informed Design to Your Organization - CSUN ATC 2024
 
Embroidery design from embroidery magazine
Embroidery design from embroidery magazineEmbroidery design from embroidery magazine
Embroidery design from embroidery magazine
 
Designing for privacy: 3 essential UX habits for product teams
Designing for privacy: 3 essential UX habits for product teamsDesigning for privacy: 3 essential UX habits for product teams
Designing for privacy: 3 essential UX habits for product teams
 
Create Funeral Invites Online @ feedvu.com
Create Funeral Invites Online @ feedvu.comCreate Funeral Invites Online @ feedvu.com
Create Funeral Invites Online @ feedvu.com
 

UX of Passwords | Refresh Seattle | Claire Carlson