WSJ: What Keeps People From Using Password Managers?
No pay wall: https://archive.is/HCtcT
Many of us are vulnerable to hackers and eager to secure our online accounts, but lots of us also refuse to use an obvious solution: password managers.
Why? Our research has found that the typical reassurances and promises about password managers just don’t work. Fortunately, our research also suggests there are strategies that can persuade people to get past the psychological barriers and keep their data safe.
[...] In a study I conducted with my Ph.D. student Norah Alkaldi, we found that the two most common methods of persuasion were ineffective in getting people to adopt password managers. The first is the “push” approach—the idea that by showing people the dangers of using simple passwords, recording passwords on their computer or using the same passwords at different sites, we would push them to adopt a safer approach. Users, we found, don’t respond to the push strategy.
[...] The other, “pull,” approach—focusing on the positives of password managers—didn’t deliver any better results.
[...] We discovered two types of “mooring factors” that keep people from changing their behavior.
[...] First, there was the effort required to enter all your passwords into the password manager.
[...] People also fear they will lose all their passwords if they forget their master password.
(Score: 1) by nitehawk214 on Saturday June 19 2021, @03:48PM (1 child)
What is more likely, a password manager getting cracked, or someone using the same or similar passwords across 20 sites and one of those 20 getting cracked?
"Don't you ever miss the days when you used to be nostalgic?" -Loiosh
(Score: 0) by Anonymous Coward on Sunday June 20 2021, @03:13PM
That's kind of the issue, with the ridiculous number of accounts and passwords that people get pressured into making, there's only a few strategies possible. Reuse the same password or store them either electronically or physically being the main ones. My password manager has several hundred total entries.
I personally opt to use a locally installed password manager and worry about backup/ synchronizing separately, but I couldn't have decent passwords for all those sites without a manager and I couldn't cone back years later of I needed to either.