The use of usernames and passwords for authentication is not secure! And we have known this for a very long time. Nevertheless, usernames and passwords are widely used, as they are easy to implement for developers. The way we deal with this problem is to blame the user for not using this method correctly and to make halfhearted attempts at either educating users or forcing them into a certain behavior. It is time to acknowledge the responsibility of developers and interaction designers for failing to care about user security. Insights Roots of the Problem The "real" security…
You must be a member of SIGCHI, a subscriber to ACM's Digital Library, or an interactions subscriber to read the full text of this article.
GET ACCESSJoin ACM SIGCHI
In addition to all of the professional benefits of being a SIGCHI member, members get full access to interactions online content and receive the print version of the magazine bimonthly.
Subscribe to the ACM Digital Library
Get access to all interactions content online and the entire archive of ACM publications dating back to 1954. (Please check with your institution to see if it already has a subscription.)
Subscribe to interactions
Get full access to interactions online content and receive the print version of the magazine bimonthly.