Using the Protection Motivation Theory, the paper tests a model password protection intention of online users. Hypotheses are proposed concerning the intention to engage in good password practice. Data were collected from 182 college students who use the Internet. The result suggests that fear, response cost and response efficacy are significantly related to online password protection intention. However, perceived severity and vulnerability are not significant predictors. The study suggests that reducing cognitive costs for passwords is imperative.