A Large-Scale Survey of Password Entry Practices on Non-Desktop Devices

Password managers encourage users to generate passwords to improve their security. However, research has shown that users avoid generating passwords, often giving the rationale that it is difficult to enter generated passwords on devices without a password manager. In this paper, we conduct a survey (n = 999) of individuals from the US, UK, and Europe, exploring the range of devices on which they enter passwords and the challenges associated with password entry on those devices. We find that password entry on devices without password managers is a common occurrence and comes with significant usability challenges. These usability challenges lead users to weaken their passwords to increase the ease of entry. We conclude this paper with a discussion of how future research could address these challenges and encourage users to adopt generated passwords.

Even with their many issues, passwords remain the dominant form of authentication [5,6,9,29,37,41]. Password managers attempt to improve users' password hygiene by assisting them with the password lifecycle [26]: generating, storing, and auto-filling passwords. If used appropriately, password managers can significantly strengthen users' security.

Research has consistently shown that users appreciate the usability benefits provided by password managers [8,30,32]. However, there is growing evidence that shows that users