How Mandatory Second Factor Affects the Authentication User Experience

Abbott, Jacob; Patil, Sameer

doi:10.1145/3313831.3376457

Cited by 22 publications

(16 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…I want to have fun using it. " (P3, ex) This conirms results from previous studies of speciic 2FA approaches showing that usability is a key factor in the scope of 2FA [1,12,18,19,23].…”

Section: Usabilitysupporting

confidence: 86%

See 1 more Smart Citation

“Nah, it’s just annoying!” A Deep Dive into User Perceptions of Two-Factor Authentication

Marky

Ragozin

Chernyshov

et al. 2022

ACM Trans. Comput.-Hum. Interact.

View full text Add to dashboard Cite

Two-factor authentication (2FA) is a recommended or imposed authentication mechanism for valuable online assets. However, 2FA mechanisms usually exhibit user experience issues that create user friction and even lead to poor acceptance, hampering the wider spread of 2FA. In this paper, we investigate user perceptions of 2FA through in-depth interviews with 42 participants, revealing key requirements that are not well met today despite recently emerged 2FA solutions. First, we investigate past experiences with authentication mechanisms emphasizing problems and aspects that hamper good user experience. Second, we investigate the different authentication factors more closely. Our results reveal particularly interesting preferences regarding the authentication factor ”ownership” in terms of properties, physical realizations, and interaction. These findings suggest a path towards 2FA mechanisms with considerably better user experience, promising to improve the acceptance and hence, the proliferation of 2FA for the benefit of security in the digital world.

show abstract

“…I want to have fun using it. " (P3, ex) This conirms results from previous studies of speciic 2FA approaches showing that usability is a key factor in the scope of 2FA [1,12,18,19,23].…”

Section: Usabilitysupporting

confidence: 86%

“…Users even reported that using Duo 2FA was easier than expected. Abbott and Patil conducted a series of online surveys on a university with mandatory 2FA usage [1]. In general, the acceptance of 2FA was not impacted by the obligation to use it, however, the frequency of usage impacted acceptance.…”

Section: Two-factor Authentication In Real-world Interactionsmentioning

confidence: 99%

“Nah, it’s just annoying!” A Deep Dive into User Perceptions of Two-Factor Authentication

Marky

Ragozin

Chernyshov

et al. 2022

ACM Trans. Comput.-Hum. Interact.

View full text Add to dashboard Cite

show abstract

“…This argument is in line with the fact that users with higher levels of education tend to be more aware with cyberthreats and cybersecurity than users with lower levels of education [32,33]. Indeed, attending college does increase the probability to get exposure to cybersecurityrelated training and its cutting-edge technology including 2FA [12][13][14]. On the other hand, many studies have pointed out that higher education is one significant factor behind social inequalities and social mobility, both of which are highly related to income [34][35][36][37].…”

Section: Education Levels and Cybersecurity Behaviorsmentioning

confidence: 53%

“…The fact that this study used no intervention in examining the 2FA adoption brought with it some important implications for practice. Perhaps developers, employers or other institutions may not need to give neither bigger incentives nor stricter enforcement like past studies documented to promote 2FA adoption [12][13][14]18]. As such, it is more likely to happen organically once the users have something to lose and that something's value is higher than the inconvenience associated with adopting 2FA.…”

Section: Theoretical and Practical Implicationsmentioning

confidence: 99%

“…For example, a study in 2015 shows that only 6.4% of Google accounts that were part of the data breach a year before had adopted 2FA [11]. Even when some tried to enforce the use of 2FA, it was not always received with open arms by the users [12][13][14]. Another fact that did not help the cause for 2FA adoption is that some users had a misconception that they would not need to adopt 2FA because of the existence of other security measures such as HTTPS despite the two work differently and are complementary instead of substitutes for each other [15].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Until you have something to lose! Loss aversion and two-factor authentication adoption

Pratama

Firmansyah

2021

ACI

View full text Add to dashboard Cite

PurposeIn this study, the authors seek to understand factors that naturally influence users to adopt two-factor authentication (2FA) without even trying to intervene by investigating factors within individuals that may influence their decision to adopt 2FA by themselves.Design/methodology/approachA total of 1,852 individuals from all 34 provinces in Indonesia participated in this study by filling out online questionnaires. The authors discussed the results from statistical analysis further through the lens of the loss aversion theory.FindingsThe authors found that loss aversion, represented by higher income that translates to greater potential pain caused by losing things to be the most significant demographic factor behind 2FA adoption. On the contrary, those with a low-income background, even if they have some college degree, are more likely to skip 2FA despite their awareness of this technology. The authors also found that the older generation, particularly females, to be among the most vulnerable groups when it comes to authentication-based cyber threats as they are much less likely to adopt 2FA, or even to be aware of its existence in the first place.Originality/valueAuthentication is one of the most important topics in cybersecurity that is related to human-computer interaction. While 2FA increases the security level of authentication methods, it also requires extra efforts that can translate to some level of inconvenience on the user's end. By identifying the associated factors from the user's ends, a necessary intervention can be made so that more users are willing to jump on the 2FA adopters' train.

show abstract

Toward fine‐grained access control and privacy protection for video sharing in media convergence environment

Ahmed

Wei

Niu

et al. 2022

Int J of Intelligent Sys

View full text Add to dashboard Cite

Video streaming applications are rapidly proliferating, allowing users to browse, download, and share videos through platforms such as YouTube, Netflix, and Amazon. Media content providers are required to register copyrights on digital platforms. With the existence of blockchain technology, users can manage their data using a smart contract, which allows them to define access and search policies and use an instant payment system without a third party in a decentralized network. We propose a secure and reliable video sharing scheme based on blockchain, using cryptographic primitives to secure the information of streamers and viewers. The use of blockchain ensures reliability and prevents the manipulating or forging of multimedia content. A smart contract system is implemented to represent contractual actions once a given access condition is satisfied. Analysis of the scheme's security and performance demonstrates that it is reliable and efficient.

show abstract

How Mandatory Second Factor Affects the Authentication User Experience

Cited by 22 publications

References 27 publications

“Nah, it’s just annoying!” A Deep Dive into User Perceptions of Two-Factor Authentication

“Nah, it’s just annoying!” A Deep Dive into User Perceptions of Two-Factor Authentication

Until you have something to lose! Loss aversion and two-factor authentication adoption

Toward fine‐grained access control and privacy protection for video sharing in media convergence environment

Contact Info

Product

Resources

About