{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,26]],"date-time":"2026-09-26T17:23:42Z","timestamp":1790443422545,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":66,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,10,15]],"date-time":"2018-10-15T00:00:00Z","timestamp":1539561600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,10,15]]},"DOI":"10.1145\/3243734.3243767","type":"proceedings-article","created":{"date-parts":[[2018,10,16]],"date-time":"2018-10-16T17:38:33Z","timestamp":1539711513000},"page":"1549-1566","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":33,"title":["\"What was that site doing with my Facebook password?\""],"prefix":"10.1145","author":[{"given":"Maximilian","family":"Golla","sequence":"first","affiliation":[{"name":"Ruhr University Bochum, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Miranda","family":"Wei","sequence":"additional","affiliation":[{"name":"University of Chicago, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Juliette","family":"Hainline","sequence":"additional","affiliation":[{"name":"University of Chicago, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lydia","family":"Filipe","sequence":"additional","affiliation":[{"name":"University of Chicago, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Markus","family":"D\u00fcrmuth","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Elissa","family":"Redmiles","sequence":"additional","affiliation":[{"name":"University of Maryland, College Park, MD, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Blase","family":"Ur","sequence":"additional","affiliation":[{"name":"University of Chicago, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2018,10,15]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"Parag Agrawal. 2018. Keeping Your Account Secure. https:\/\/blog.twitter.com\/official\/en_us\/topics\/company\/2018\/keeping-your-account-secure.html  Parag Agrawal. 2018. Keeping Your Account Secure. https:\/\/blog.twitter.com\/official\/en_us\/topics\/company\/2018\/keeping-your-account-secure.html"},{"key":"e_1_3_2_2_2_1","volume-title":"Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness Proc. USENIX Security Symposium. 257--272","author":"Akhawe Devdatta","year":"2013","unstructured":"Devdatta Akhawe and Adrienne Porter Felt . 2013 . Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness Proc. USENIX Security Symposium. 257--272 . Devdatta Akhawe and Adrienne Porter Felt. 2013. Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness Proc. USENIX Security Symposium. 257--272."},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2517881.2517886"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.44"},{"key":"e_1_3_2_2_5_1","unstructured":"Cristian Bravo-Lillo Lorrie Cranor Saranga Komanduri Stuart Schechter and Manya Sleeper. 2014. Harder to Ignore? Revisiting Pop-Up Fatigue and Approaches to Prevent It Proc. SOUPS. 105--111.   Cristian Bravo-Lillo Lorrie Cranor Saranga Komanduri Stuart Schechter and Manya Sleeper. 2014. Harder to Ignore? Revisiting Pop-Up Fatigue and Approaches to Prevent It Proc. SOUPS. 105--111."},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.198"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2501604.2501610"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3174030"},{"key":"e_1_3_2_2_9_1","unstructured":"Sam Croley (\"Chick3nman\"). 2018. Abusing Password Reuse at Scale: Bcrypt and Beyond. https:\/\/www.youtube.com\/watch?v=5bYvTPVXC18&t=6h05m00s  Sam Croley (\"Chick3nman\"). 2018. Abusing Password Reuse at Scale: Bcrypt and Beyond. https:\/\/www.youtube.com\/watch?v=5bYvTPVXC18&t=6h05m00s"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23357"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1357054.1357219"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2470654.2481329"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1186\/s13673-017-0093-6"},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2501604.2501617"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2702123.2702442"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242661"},{"key":"e_1_3_2_2_17_1","volume-title":"Proc. USENIX Security Symposium. 575--590","author":"Flor\u00eancio Dinei","unstructured":"Dinei Flor\u00eancio , Cormac Herley , and Paul C . van Oorschot. 2014. Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts . In Proc. USENIX Security Symposium. 575--590 . Dinei Flor\u00eancio, Cormac Herley, and Paul C. van Oorschot. 2014. Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts. In Proc. USENIX Security Symposium. 575--590."},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2934663"},{"key":"e_1_3_2_2_19_1","volume-title":"Who Are You? A Statistical Approach to Measuring User Authenticity Proc. NDSS","author":"Freeman David Mandell","unstructured":"David Mandell Freeman , Sakshi Jain , Markus D\u00fcrmuth , Battista Biggio , and Giorgio Giacinto . 2016. Who Are You? A Statistical Approach to Measuring User Authenticity Proc. NDSS . David Mandell Freeman, Sakshi Jain, Markus D\u00fcrmuth, Battista Biggio, and Giorgio Giacinto. 2016. Who Are You? A Statistical Approach to Measuring User Authenticity Proc. NDSS."},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1143120.1143127"},{"key":"e_1_3_2_2_21_1","unstructured":"Maximilian Golla Theodor Schnitzler and Markus D\u00fcrmuth. 2018. \"Will Any Password Do?\" Exploring Rate-Limiting on the Web Proc. WAY.  Maximilian Golla Theodor Schnitzler and Markus D\u00fcrmuth. 2018. \"Will Any Password Do?\" Exploring Rate-Limiting on the Web Proc. WAY."},{"key":"e_1_3_2_2_22_1","unstructured":"Dan Goodin. 2012. Why Passwords Have Never Been Weaker--and Crackers Have Never Been Stronger. https:\/\/arstechnica.com\/information-technology\/2012\/08\/passwords-under-assault\/  Dan Goodin. 2012. Why Passwords Have Never Been Weaker--and Crackers Have Never Been Stronger. https:\/\/arstechnica.com\/information-technology\/2012\/08\/passwords-under-assault\/"},{"key":"e_1_3_2_2_23_1","unstructured":"Google. 2010. Detecting Suspicious Account Activity. https:\/\/security.googleblog.com\/2010\/03\/detecting-suspicious-account-activity.html  Google. 2010. Detecting Suspicious Account Activity. https:\/\/security.googleblog.com\/2010\/03\/detecting-suspicious-account-activity.html"},{"key":"e_1_3_2_2_24_1","unstructured":"Google Inc.. 2018. 2-Step Verification. https:\/\/www.google.com\/landing\/2step\/  Google Inc.. 2018. 2-Step Verification. https:\/\/www.google.com\/landing\/2step\/"},{"key":"e_1_3_2_2_25_1","unstructured":"Jeremi M. Gosney. 2017. Nvidia GTX 1080 Ti Hashcat Benchmarks. https:\/\/gist.github.com\/epixoip\/ace60d09981be09544fdd35005051505  Jeremi M. Gosney. 2017. Nvidia GTX 1080 Ti Hashcat Benchmarks. https:\/\/gist.github.com\/epixoip\/ace60d09981be09544fdd35005051505"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2568187"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.5555\/2360743.2360824"},{"key":"e_1_3_2_2_28_1","volume-title":"Contextual Design","author":"Holtzblatt Karen","unstructured":"Karen Holtzblatt and Hugh Beyer . 2016. Contextual Design ( second ed.). Elsevier . Karen Holtzblatt and Hugh Beyer. 2016. Contextual Design (second ed.). Elsevier."},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025788"},{"key":"e_1_3_2_2_30_1","unstructured":"Troy Hunt. 2017. Password Reuse Credential Stuffing and Another Billion Records in Have I Been Pwned? https:\/\/www.troyhunt.com\/password-reuse-credential-stuffing-and-another-1-billion-records-in-have-i-been-pwned\/  Troy Hunt. 2017. Password Reuse Credential Stuffing and Another Billion Records in Have I Been Pwned? https:\/\/www.troyhunt.com\/password-reuse-credential-stuffing-and-another-1-billion-records-in-have-i-been-pwned\/"},{"key":"e_1_3_2_2_31_1","unstructured":"Troy Hunt. 2018. Have I Been Pwned? Check If Your Email Has Been Compromised in a Data Breach. https:\/\/haveibeenpwned.com  Troy Hunt. 2018. Have I Been Pwned? Check If Your Email Has Been Compromised in a Data Breach. https:\/\/haveibeenpwned.com"},{"key":"e_1_3_2_2_32_1","volume-title":"Analysis of Publicly Leaked Credentials and the Long Story of Password (Re-)use Proc. PASSWORDS","author":"Jaeger David","unstructured":"David Jaeger , Chris Pelchen , Hendrik Graupner , Feng Cheng , and Christoph Meinel . 2016. Analysis of Publicly Leaked Credentials and the Long Story of Password (Re-)use Proc. PASSWORDS . David Jaeger, Chris Pelchen, Hendrik Graupner, Feng Cheng, and Christoph Meinel. 2016. Analysis of Publicly Leaked Credentials and the Long Story of Password (Re-)use Proc. PASSWORDS."},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1080\/10570314.2013.866686"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1978942.1979321"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1093\/poq\/nfn063"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1146\/annurev.psych.50.1.537"},{"key":"e_1_3_2_2_37_1","volume-title":"Proc. USENIX Security Symposium. 465--479","author":"Li Zhiwei","year":"2014","unstructured":"Zhiwei Li , Warren He , Devdatta Akhawe , and Dawn Song . 2014 . The Emperort New Password Manager: Security Analysis of Web-based Password Managers . In Proc. USENIX Security Symposium. 465--479 . Zhiwei Li, Warren He, Devdatta Akhawe, and Dawn Song. 2014. The Emperort New Password Manager: Security Analysis of Web-based Password Managers. In Proc. USENIX Security Symposium. 465--479."},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(15)30023-4"},{"key":"e_1_3_2_2_39_1","unstructured":"Chris Long. 2014. Keeping Passwords Secure. https:\/\/www.facebook.com\/notes\/protect-the-graph\/keeping-passwords-secure\/1519937431579736\/  Chris Long. 2014. Keeping Passwords Secure. https:\/\/www.facebook.com\/notes\/protect-the-graph\/keeping-passwords-secure\/1519937431579736\/"},{"key":"e_1_3_2_2_40_1","volume-title":"USENIX Security Symposium. 175--191","author":"Melicher William","year":"2016","unstructured":"William Melicher , Blase Ur , Sean M. Segreti , Saranga Komanduri , Lujo Bauer , Nicolas Christin , and Lorrie Faith Cranor . 2016 . Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks Proc . USENIX Security Symposium. 175--191 . William Melicher, Blase Ur, Sean M. Segreti, Saranga Komanduri, Lujo Bauer, Nicolas Christin, and Lorrie Faith Cranor. 2016. Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks Proc. USENIX Security Symposium. 175--191."},{"key":"e_1_3_2_2_41_1","volume-title":"Proc. Enigma.","author":"Milka Grzergor","year":"2018","unstructured":"Grzergor Milka . 2018 . Anatomy of Account Takeover . In Proc. Enigma. Grzergor Milka. 2018. Anatomy of Account Takeover. In Proc. Enigma."},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1467-8640.2012.00460.x"},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987475"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133973"},{"key":"e_1_3_2_2_45_1","unstructured":"Nicole Perlroth. 2017. All 3 Billion Yahoo Accounts Were Affected by 2013 Attack. https:\/\/www.nytimes.com\/2017\/10\/03\/technology\/yahoo-hack-3-billion-users.html  Nicole Perlroth. 2017. All 3 Billion Yahoo Accounts Were Affected by 2013 Attack. https:\/\/www.nytimes.com\/2017\/10\/03\/technology\/yahoo-hack-3-billion-users.html"},{"key":"e_1_3_2_2_46_1","volume-title":"Password Reuse Behavior: How Massive Online Data Breaches Impacts Personal Data in Web Proc. ICICSE. 199--210","author":"Poornachandran Prabaharan","year":"2015","unstructured":"Prabaharan Poornachandran , M. Nithun , Soumajit Pal , Aravind Ashok , and Aravid Ajayan . 2015 . Password Reuse Behavior: How Massive Online Data Breaches Impacts Personal Data in Web Proc. ICICSE. 199--210 . Prabaharan Poornachandran, M. Nithun, Soumajit Pal, Aravind Ashok, and Aravid Ajayan. 2015. Password Reuse Behavior: How Massive Online Data Breaches Impacts Personal Data in Web Proc. ICICSE. 199--210."},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/2335356.2335364"},{"key":"e_1_3_2_2_48_1","volume-title":"Mazurek","author":"Redmiles Elissa M.","year":"2017","unstructured":"Elissa M. Redmiles , Everest Liu , and Michelle L . Mazurek . 2017 . You Want Me To Do What? A Design Study of Two-Factor Authentication Messages Proc. WAY. Elissa M. Redmiles, Everest Liu, and Michelle L. Mazurek. 2017. You Want Me To Do What? A Design Study of Two-Factor Authentication Messages Proc. WAY."},{"key":"e_1_3_2_2_49_1","volume-title":"Mazurek","author":"Redmiles Elissa M.","year":"2016","unstructured":"Elissa M. Redmiles , Amelia R. Malone , and Michelle L . Mazurek . 2016 . I Think They're Trying to Tell Me Something: Advice Sources and Selection for Digital Security. In Proc. IEEE S &P. 272--288. Elissa M. Redmiles, Amelia R. Malone, and Michelle L. Mazurek. 2016. I Think They're Trying to Tell Me Something: Advice Sources and Selection for Digital Security. In Proc. IEEE S&P. 272--288."},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243740"},{"key":"e_1_3_2_2_51_1","unstructured":"Shape Security. 2017. 2017 Credential Spill Report. http:\/\/info.shapesecurity.com\/2017-Credential-Spill-Report-w.html  Shape Security. 2017. 2017 Credential Spill Report. http:\/\/info.shapesecurity.com\/2017-Credential-Spill-Report-w.html"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/1837110.1837113"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/1280680.1280692"},{"key":"e_1_3_2_2_54_1","volume-title":"The Password Life Cycle: User Behaviour in Managing Passwords Proc. SOUPS. 243--255","author":"Stobert Elizabeth","year":"2014","unstructured":"Elizabeth Stobert and Robert Biddle . 2014 . The Password Life Cycle: User Behaviour in Managing Passwords Proc. SOUPS. 243--255 . Elizabeth Stobert and Robert Biddle. 2014. The Password Life Cycle: User Behaviour in Managing Passwords Proc. SOUPS. 243--255."},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/2078827.2078833"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660282"},{"key":"e_1_3_2_2_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134067"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.1037\/0033-2909.133.5.859"},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3026050"},{"key":"e_1_3_2_2_60_1","unstructured":"Blase Ur Fumiko Noma Jonathan Bees Sean M. Segreti Richard Shay Lujo Bauer Nicolas Christin and Lorrie Faith Cranor. 2015. \"I Added '!' at the End to Make It Secure\": Observing Password Creation in the Lab Proc. SOUPS. 123--140.   Blase Ur Fumiko Noma Jonathan Bees Sean M. Segreti Richard Shay Lujo Bauer Nicolas Christin and Lorrie Faith Cranor. 2015. \"I Added '!' at the End to Make It Secure\": Observing Password Creation in the Lab Proc. SOUPS. 123--140."},{"key":"e_1_3_2_2_61_1","volume-title":"Measuring Real-World Accuracies and Biases in Modeling Password Guessability Proc. USENIX Security Symposium. 463--481","author":"Ur Blase","year":"2015","unstructured":"Blase Ur , Sean M. Segreti , Lujo Bauer , Nicolas Christin , Lorrie Faith Cranor , Saranga Komanduri , Darya Kurilova , Michelle L. Mazurek , William Melicher , and Richard Shay . 2015 . Measuring Real-World Accuracies and Biases in Modeling Password Guessability Proc. USENIX Security Symposium. 463--481 . Blase Ur, Sean M. Segreti, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, Saranga Komanduri, Darya Kurilova, Michelle L. Mazurek, William Melicher, and Richard Shay. 2015. Measuring Real-World Accuracies and Biases in Modeling Password Guessability Proc. USENIX Security Symposium. 463--481."},{"key":"e_1_3_2_2_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3176258.3176332"},{"key":"e_1_3_2_2_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978339"},{"key":"e_1_3_2_2_64_1","volume-title":"Reiter","author":"Wang Ke Coby","year":"2018","unstructured":"Ke Coby Wang and Michael K . Reiter . 2018 . How to End Password Reuse on the Web. CoRR Vol . abs\/1805.00566 (May. 2018), 1--16. Ke Coby Wang and Michael K. Reiter. 2018. How to End Password Reuse on the Web. CoRR Vol. abs\/1805.00566 (May. 2018), 1--16."},{"key":"e_1_3_2_2_65_1","volume-title":"Proc. SOUPS. 175--188","author":"Wash Rick","year":"2016","unstructured":"Rick Wash , Emilee Radar , Ruthie Berman , and Zac Wellmer . 2016 . Understanding Password Choices: How Frequently Entered Passwords are Re-used Across Websites . In Proc. SOUPS. 175--188 . Rick Wash, Emilee Radar, Ruthie Berman, and Zac Wellmer. 2016. Understanding Password Choices: How Frequently Entered Passwords are Re-used Across Websites. In Proc. SOUPS. 175--188."},{"key":"e_1_3_2_2_66_1","volume-title":"Proc. SOUPS.","author":"Zou Yixin","year":"2018","unstructured":"Yixin Zou , Abraham H Mhaidli , Austin McCall , and Florian Schaub . 2018 . \" I've Got Nothing to Lose\": Consumers' Risk Perceptions and Protective Actions after the Equifax Data Breach . In Proc. SOUPS. Yixin Zou, Abraham H Mhaidli, Austin McCall, and Florian Schaub. 2018. \"I've Got Nothing to Lose\": Consumers' Risk Perceptions and Protective Actions after the Equifax Data Breach. In Proc. SOUPS."}],"event":{"name":"CCS '18: 2018 ACM SIGSAC Conference on Computer and Communications Security","location":"Toronto Canada","acronym":"CCS '18","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243734.3243767","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3243734.3243767","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:08:18Z","timestamp":1750212498000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243734.3243767"}},"subtitle":["Designing Password-Reuse Notifications"],"short-title":[],"issued":{"date-parts":[[2018,10,15]]},"references-count":66,"alternative-id":["10.1145\/3243734.3243767","10.1145\/3243734"],"URL":"https:\/\/doi.org\/10.1145\/3243734.3243767","relation":{},"subject":[],"published":{"date-parts":[[2018,10,15]]},"assertion":[{"value":"2018-10-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}