Author(s): Shukun Yang, Shouling Ji, Xin Hu, Raheem Beyah

Download: Paper (PDF)

Date: 27 Jul 2015

Document Type: Briefing Papers

Associated Event: NDSS Symposium 2015


We present a novel and comprehensive examination of the effectiveness and soundness of commercial password meters and their impacts on password security. The experiments are backed with a collection of state-of-the-art password cracking algorithms in both academia and industry. We show that some of the popular meters are stunningly inaccurate.