Password Authentication Measurement Research
Illuminating modern authentication policies at scale for the first time
Our Published Research
Password Creation Policies
Password Creation Policies
Password Creation Policies
In this study, we conducted the largest evaluation of website password creation policies to date, assessing over 20K sites (∼135x more sites than prior work). Our results revealed the state of modern web password creation policies, and identified insecure policies deployed
Password Login Policies
Password Creation Policies
Password Creation Policies
This study characterizes authentication policies and implementation decisions throughout the account login process, providing the most expansive survey of modern website login security to date. We inferred login policies on 18K to 359K websites, evaluating each stage of the login workflow.