Paper Info
Title
"It's not actually that horrible": Exploring Adoption of Two-Factor Authentication at a University.
Abstract
Despite the additional protection it affords, two-factor authentication (2FA) adoption reportedly remains low. To better understand 2FA adoption and its barriers, we observed the deployment of a 2FA system at Carnegie Mellon University (CMU). We explore user behaviors and opinions around adoption, surrounding a mandatory adoption deadline. Our results show that (a) 2FA adopters found it annoying, but fairly easy to use, and believed it made their accounts more secure; (b) experience with CMU Duo often led to positive perceptions, sometimes translating into 2FA adoption for other accounts; and, (c) the differences between users required to adopt 2FA and those who adopted voluntarily are smaller than expected. We also explore the relationship between different usage patterns and perceived usability, and identify user misconceptions, insecure practices, and design issues. We conclude with recommendations for large-scale 2FA deployments to maximize adoption, focusing on implementation design, use of adoption mandates, and strategic messaging.
Year
DOI
Venue
2018
10.1145/3173574.3174030
CHI
Keywords
Field
DocType
two-factor authentication, adoption, usability
Internet privacy,Software deployment,Authentication,Computer science,Usability,Multi-factor authentication,Perception,Multimedia
Conference
ISBN
Citations 
PageRank 
978-1-4503-5620-6
3
0.51
References 
Authors
14
7
Name
Order
Citations
PageRank
Jessica Colnago1211.26
Summer Devlin231.19
Maggie Oates371.34
Chelse Swoopes471.34
Lujo Bauer52460120.71
Lorrie Faith Cranor66767515.80
Nicolas Christin72133126.02