VaultIME: Regaining User Control for Password Managers through Auto-correction

Guan, Le and Farhang, Sadegh and Pu, Yu and Guo, Pinyao and Grossklags, Jens and Liu, Peng (2018) VaultIME: Regaining User Control for Password Managers through Auto-correction. EAI Endorsed Transactions on Security and Safety, 4 (14). e4. ISSN 2032-9393

[thumbnail of eai.15-5-2018.154772.pdf]
Available under License Creative Commons Attribution No Derivatives.

Download (1MB) | Preview


Users are often educated to follow advices from security experts. For example, using a password manager is considered an effective way to maintain a unique and strong password for every website. However, user surveys reveal that most users are not willing to adopt this tool. They feel uncomfortable when they grant password managers the privilege to automate access to their digital accounts. We propose VaultIME to nudge more users towards the adoption of password managers by offering them a tangible benefit, while only slightly interfering with their current usage practices. Instead of “auto-filling” password fields, we propose to “auto-correct” passwords in case of minor typos. VaultIME integrates the functionality of a password manager into the input method editor. Running as an app on mobile phones, VaultIME remembers user passwords on a per-app basis, and corrects mistyped passwords within a typo-tolerant set. We show that VaultIME achieves high levels of usability and security.

Item Type: Article
Uncontrolled Keywords: Password manager, Auto-correction, IME, Usable security
Subjects: H Social Sciences > H Social Sciences (General)
Q Science > QA Mathematics > QA75 Electronic computers. Computer science
QA75 Electronic computers. Computer science
Depositing User: EAI Editor IV
Date Deposited: 26 Mar 2021 13:52
Last Modified: 26 Mar 2021 13:52

Actions (login required)

View Item
View Item