SoylentNews is people
SoylentNews
WSJ: What Keeps People From Using Password Managers?
No pay wall: https://archive.is/HCtcT
Many of us are vulnerable to hackers and eager to secure our online accounts, but lots of us also refuse to use an obvious solution: password managers.
Why? Our research has found that the typical reassurances and promises about password managers just don’t work. Fortunately, our research also suggests there are strategies that can persuade people to get past the psychological barriers and keep their data safe.
[...] In a study I conducted with my Ph.D. student Norah Alkaldi, we found that the two most common methods of persuasion were ineffective in getting people to adopt password managers. The first is the “push” approach—the idea that by showing people the dangers of using simple passwords, recording passwords on their computer or using the same passwords at different sites, we would push them to adopt a safer approach. Users, we found, don’t respond to the push strategy.
[...] The other, “pull,” approach—focusing on the positives of password managers—didn’t deliver any better results.
[...] We discovered two types of “mooring factors” that keep people from changing their behavior.
[...] First, there was the effort required to enter all your passwords into the password manager.
[...] People also fear they will lose all their passwords if they forget their master password.
(Score: 2) by helel on Friday June 18 2021, @02:22PM (1 child)
From a certain point of view the lack of a subscription fee would be a serious flaw...
I think writing down passwords gets a bad rap because of the post-it note on the monitor at work. Lots of (older) people have used written passwords and then left them visible in public spaces making the entire idea seem bad when in truth it's perfectly secure in your own private space.
Republican Patriotism [youtube.com]
(Score: 0) by Anonymous Coward on Sunday June 20 2021, @03:32PM
It has a bad rap because it's easy to lose the sheet, hard to back up, gives them all of your passwords and limits the length and type of passwords. It fails on just about every level other than being remotely accessible.
Really, the right thing would be for the people running the sites to be held accountable for not allowing proper 2FA like FIDO or the like along with secure passwords. I've encountered far too many sites that either don't authenticate the passwords as they're being set or just silently truncate to fit the character limit. And don't even get me started on character limits, there should never be a maximum character limit.