psychology of passwords: combatting cognitive dissonance ......© 2019, logmein, inc. 12 1. create...

14
1 © 2018, LogMeIn, Inc. | CONFIDENTIAL – FOR INTERNAL USE ONLY Psychology of Passwords: Combatting Cognitive Dissonance in Password Creation JUNE 25, 2020

Upload: others

Post on 15-Oct-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

1© 2018, LogMeIn, Inc. | CONFIDENTIAL – FOR INTERNAL USE ONLY

Psychology of Passwords: Combatting Cognitive Dissonance in Password Creation

JUNE 25, 2020

Page 2: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

2© 2018, LogMeIn, Inc. | CONFIDENTIAL – FOR INTERNAL USE ONLY

Gerald BeucheltChief Information Security Officer, LogMeIn — makers of LastPass

Meet Our Guest

Page 3: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

3© 2019, LogMeIn, Inc.

• 3rd Annual Report examines online security behaviors from 3,250 individuals across the United States, Australia, Singapore, Germany, Brazil, and the United Kingdom.

• Year after year there is heightened global awareness of hacking and data breaches, yet consumer password behaviors remain largely unchanged

Page 4: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

4© 2019, LogMeIn, Inc.

Key Findings

Cognitive dissonance prevails:

Overall people say they know what they should do to protect themselves but they don’t take action

Security-Conscious Thinking Doesn’t Translate to Action

Fear of Forgetfulness = Number One Reason for Password Reuse

Awareness and Usage of MFA Increasing

Page 5: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

5© 2019, LogMeIn, Inc.

Global Cyber Threats Continue to Skyrocket,

But Password Behaviors Remain Unchanged

Page 6: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

People KNOW What’s Right, but They DO the Opposite

Page 7: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

7© 2019, LogMeIn, Inc.

Don’t Underestimate Your Risk

Think their accounts aren‘t worth a hacker’s time

42%

Page 8: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

8© 2019, LogMeIn, Inc.

People’s Need for Control is Putting them at Risk

Page 9: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

9© 2019, LogMeIn, Inc.

Remembering Passwords Isn’t

Working

Page 10: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

10© 2019, LogMeIn, Inc.

How Are People

Protecting Themselves?

What accounts are people protecting?

Page 11: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

11© 2019, LogMeIn, Inc.

Advanced Security Controls Are Being Adopted

Page 12: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

12© 2019, LogMeIn, Inc.

1. Create unique, strong passwords for every account – Meaning 20 characters or more, randomly generated,

containing a mix of lower and uppercase letters, digits and symbols.

2. Turn on MFA for all accounts that offer it

3. Monitor your data with credit monitoring and/or dark web monitoring services

4. Keep software up to date

5. Watch for phishing and social engineering attacks

What More Can You Be Doing To Secure Your Accounts?

Page 13: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

Questions?

Page 14: Psychology of Passwords: Combatting Cognitive Dissonance ......© 2019, LogMeIn, Inc. 12 1. Create unique, strong passwords for every account –Meaning 20 characters or more, randomly

Thank you!