Carnegie Mellon University

Development of a Data-Driven Open Source Password Meter

We propose to build and evaluate an open-­source password-­strength meter that uses numerous structural and semantic properties of passwords to provide a data-­driven analysis of password strength and actionable feedback and guidance to users. The meter will be released with options for system administrators to configure the password policy, visualization, bandwidth use, and site-­‐specific features. We will evaluate the meter through online studies that will measure by multiple metrics the strength and usability of passwords created with and without the presence of the meter.

Lorrie Crannor

Lorrie Crannor

Project Lead

Lujo Bauer

Lujo Bauer

Project Lead

Nicholas Christin

Nicholas Christin

Project Lead