Learning Password Best Practices Through In-Task Instruction
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2026
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866910106645430272 |
|---|---|
| author | Ma, Qian Zhou, Yingfan Kaushik, Shubhang Joshi, Aamod Majumdar, Aditya Apthorpe, Noah Shvartzshnaider, Yan Rajtmajer, Sarah Frischmann, Brett |
| author_facet | Ma, Qian Zhou, Yingfan Kaushik, Shubhang Joshi, Aamod Majumdar, Aditya Apthorpe, Noah Shvartzshnaider, Yan Rajtmajer, Sarah Frischmann, Brett |
| contents | Users often make security- and privacy-relevant decisions without a clear understanding of the rules that govern safe behavior. We introduce pedagogical friction, a design approach that inserts brief, instructional interactions at the moment of action. We evaluate this approach in the context of password creation, a familiar task with clear quality criteria. We conducted a randomized study with 128 participants across four interface conditions that varied the depth and interactivity of guidance. We assessed three outcomes: (1) rule compliance in a subsequent password task without guidance, (2) accuracy on survey questions tied to password rules, and (3) behavior-knowledge alignment, which captures whether participants who correctly followed a rule also recognized it on the survey. Across the guided conditions, participants corrected most rule violations in the follow-up task and showed high behavior-knowledge alignment. Survey results suggested clearer advantages for some rule types, especially symbol related questions. These results position pedagogical friction as a lightweight intervention for security- and privacy-critical interfaces. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2601_06650 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | Learning Password Best Practices Through In-Task Instruction Ma, Qian Zhou, Yingfan Kaushik, Shubhang Joshi, Aamod Majumdar, Aditya Apthorpe, Noah Shvartzshnaider, Yan Rajtmajer, Sarah Frischmann, Brett Human-Computer Interaction Users often make security- and privacy-relevant decisions without a clear understanding of the rules that govern safe behavior. We introduce pedagogical friction, a design approach that inserts brief, instructional interactions at the moment of action. We evaluate this approach in the context of password creation, a familiar task with clear quality criteria. We conducted a randomized study with 128 participants across four interface conditions that varied the depth and interactivity of guidance. We assessed three outcomes: (1) rule compliance in a subsequent password task without guidance, (2) accuracy on survey questions tied to password rules, and (3) behavior-knowledge alignment, which captures whether participants who correctly followed a rule also recognized it on the survey. Across the guided conditions, participants corrected most rule violations in the follow-up task and showed high behavior-knowledge alignment. Survey results suggested clearer advantages for some rule types, especially symbol related questions. These results position pedagogical friction as a lightweight intervention for security- and privacy-critical interfaces. |
| title | Learning Password Best Practices Through In-Task Instruction |
| topic | Human-Computer Interaction |
| url | https://arxiv.org/abs/2601.06650 |