Are Users More Willing to Use Formally Verified Password Managers?
Fuente:
arXiv
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866915482273054720 |
|---|---|
| author | Carreira, Carolina Ferreira, João F. Mendes, Alexandra Christin, Nicolas |
| author_facet | Carreira, Carolina Ferreira, João F. Mendes, Alexandra Christin, Nicolas |
| contents | Formal verification has recently been increasingly used to prove the correctness and security of many applications. It is attractive because it can prove the absence of errors with the same certainty as mathematicians proving theorems. However, while most security experts recognize the value of formal verification, the views of non-technical users on this topic are unknown. To address this issue, we designed and implemented two experiments to understand how formal verification impacts users. Our approach started with a formative study involving 15 participants, followed by the main quantitative study with 200 individuals. We focus on the application domain of password managers since it has been documented that the lack of trust in password managers might lead to lower adoption. Moreover, recent efforts have focused on formally verifying (parts of) password managers. We conclude that formal verification is seen as desirable by users and identify three actional recommendations to improve formal verification communication efforts. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2504_02124 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Are Users More Willing to Use Formally Verified Password Managers? Carreira, Carolina Ferreira, João F. Mendes, Alexandra Christin, Nicolas Cryptography and Security Human-Computer Interaction Logic in Computer Science Software Engineering D.3; F.4; H.5; I.7; E.4 Formal verification has recently been increasingly used to prove the correctness and security of many applications. It is attractive because it can prove the absence of errors with the same certainty as mathematicians proving theorems. However, while most security experts recognize the value of formal verification, the views of non-technical users on this topic are unknown. To address this issue, we designed and implemented two experiments to understand how formal verification impacts users. Our approach started with a formative study involving 15 participants, followed by the main quantitative study with 200 individuals. We focus on the application domain of password managers since it has been documented that the lack of trust in password managers might lead to lower adoption. Moreover, recent efforts have focused on formally verifying (parts of) password managers. We conclude that formal verification is seen as desirable by users and identify three actional recommendations to improve formal verification communication efforts. |
| title | Are Users More Willing to Use Formally Verified Password Managers? |
| topic | Cryptography and Security Human-Computer Interaction Logic in Computer Science Software Engineering D.3; F.4; H.5; I.7; E.4 |
| url | https://arxiv.org/abs/2504.02124 |