Abstract
In the rapidly evolving landscape of cybersecurity, the strength and confidentiality of passwords remain critical for safeguarding personal and organizational data. While complex passwords enhance security, they are often challenging to create and memorize, leading to widespread reliance on auto-generated and auto-saved password features in modern web browsers. These tools simplify logins and promote strong, unique passwords, but they also introduce significant risks, such as single points of failure, vulnerability to phishing, device or cloud breaches, and exposure from weak or reused passwords. Despite these advancements, memorized strong passwords remain essential, particularly for high-security data. However, the balance between password strength and human memorability remains undefined, creating a gap in usability and security. This paper introduces a novel approach to password creation by empowering users to develop personalized password formulas, a structured yet adaptable framework for generating strong, unique, and memorable passwords. Unlike traditional password policies or mnemonic techniques, this method integrates user-specific variables, such as personal experiences, preferences, and cognitive patterns, into the password creation process. By leveraging these individualized elements, the approach enhances password complexity and resilience against brute-force, dictionary, and social engineering attacks while significantly improving memorability. This reduces reliance on insecure storage practices, such as browser-based password managers, and fosters a stronger sense of ownership over personal cybersecurity.
Recommended Citation
Alotaibi, Yazeed and Alshawmar, Moayad, "Personalized Password Formulas: Secure, Memorable, and User-Centric" (2025). AMCIS 2025 TREOs. 88.
https://aisel.aisnet.org/treos_amcis2025/88
Comments
tpp1061