1) The document presents guidelines for using nudges in a ethical manner to encourage stronger password authentication. 2) It describes an enriched nudge experiment involving a nudge about password strength, an incentive to create a strong password, and a reminder of the importance of password security. 3) The results showed that the enriched nudge was effective at influencing users to create stronger passwords compared to traditional password expiry notifications and alerts.

1. Guidelines For Ethical
Nudging In Password
Authentication
Presented by: S.M.Nurnobi
ID NO: 170103020022

2. Abstract
 Nudging has been adopted by many disciplines in the last decade in order to
achieve behavioral change. Information security is no exception.
 A number of attempts have been made to nudge end-users towards stronger
passwords.
 Here we report on our deployment of an enriched nudge displayed to
participants on the system enrolment page when a password has to be
chosen.

3. Preamble
 The password is intended to be a secret shared exclusively between the
password owner and the system the password controls access .Passwords
can leak for a number of reasons.
 They could be guessed, for example, especially if weak passwords are
chosen, as users tend to do Leaked passwords permit unauthorized access to
sensitive personal or organizational data in a way that is sometimes very hard
to detect.

4. Password Expiry Alternatives
• Notifications.
• Alerts.
• Multi-Password.
• Multi-Factor.
• Multi-Channel.
• One-Time Passwords.
• Expire Intelligently.

5. • The aim of the investigation was to develop an intervention that was
powerful enough to induce people to create stronger passwords.
• We implemented a strength-dependent password expiry scheme.

6. Enriched Nudge
 Nudge
Figure : The Nudge

7. Figure : The Incentive
 Incentive

8.  Reminder
Figure : The Reminder

9. Ethical Password Authentication Guidelines
Figure : Ethical Password Nudge Characteristics

10. Conclusion
In this paper we report on an investigation into the efficacy
of an enriched nudge, comprising a nudge, an incentive
and a reminder, in terms of influencing people towards
choosing stronger passwords.

11. Thank You