Password Policy

Password Policy is a regulatory framework within information security management that specifies the rules and requirements for creating, storing, and managing user passwords to ensure authorized access and protect digital systems from unauthorized breaches.

120

Publications

Citations

271

Authors

118

Institutions

Publications per year

2017–2026

Parents

Security Policy

Children

Default Password PoliciesPassword Aging PoliciesPassword Blacklist PoliciesPassword Change PoliciesPassword Complexity RequirementsPassword Composition RulesPassword Dictionary Attack ResistancePassword Entropy RequirementsPassword Expiration PoliciesPassword Generation Policies

Publications

120

Testing metrics for password creation policies by attacking large sets of revealed passwords

Matt Weir, Sudhir Aggarwal, Michael Collins et al. · 2010 · 411 citations

Computing, Computer Science, Cybersecurity +17

Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms

Patrick Gage Kelley, Saranga Komanduri, Michelle L. Mazurek et al. · 2012 · 401 citations

Computing, Computer Science, Computer Systems +15

Of passwords and people

Saranga Komanduri, Richard Shay, Patrick Gage Kelley et al. · 2011 · 349 citations

Computing, Computer Science, Computer Systems +16

The domino effect of password reuse

Blake Ives, Kenneth R. Walsh, Helmut Schneider · Communications of the ACM · 2004 · 335 citations

Computing, Computer Science, Cybersecurity +15

The true cost of unusable password policies

Philip Inglesant, M. Angela Sasse · 2010 · 329 citations

Computing, Computer Science, Cybersecurity +16

1–5 of 120

Authors

271

LF
Lorrie Faith Cranor
Carnegie Mellon University, United States
13 publications · 1.9K citations
13
h-index
NC
Nicolas Christin
Carnegie Mellon University, United States
12 publications · 1.8K citations
12
h-index
LB
Lujo Bauer
Carnegie Mellon University, United States
12 publications · 1.8K citations
12
h-index
RS
Richard Shay
Carnegie Mellon University, United States
10 publications · 1.6K citations
10
h-index
SK
Saranga Komanduri
Carnegie Mellon University, United States
9 publications · 1.5K citations
9
h-index

1–5 of 271

Institutions

118

1–8 of 118

Venues

Computers & Security
12 publications · 599 citations
12
h-index
International Journal of Human-Computer Studies
6 publications · 452 citations
6
h-index
Computer Fraud & Security
5 publications · 103 citations
5
h-index
IEEE Transactions on Information Forensics and Security
3 publications · 64 citations
3
h-index
Symposium On Usable Privacy and Security
Conference · 3 publications · 101 citations
3
h-index

1–5