Design and field evaluation of PassSec: Raising and sustaining web surfer risk awareness

Abstract

This paper presents PassSec, a Firefox Add-on that raises user awareness about safe and unsafe password entry while they surf the web. PassSec comprises a two-stage approach: highlighting as the web page loads, then bringing up a just-in-time helpful dialogue when the user demonstrates an intention to enter a password on an unsafe web page. PassSec was developed using a human-centred design approach.We performed a field study with 31 participants that showed that PassSec significantly reduces the number of logins on websites where password entry is unsafe.