{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T16:24:14Z","timestamp":1791476654824,"version":"4.3.4"},"publisher-location":"New York, NY, USA","reference-count":71,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,10,15]],"date-time":"2018-10-15T00:00:00Z","timestamp":1539561600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,10,15]]},"DOI":"10.1145\/3243734.3243769","type":"proceedings-article","created":{"date-parts":[[2018,10,16]],"date-time":"2018-10-16T17:38:33Z","timestamp":1539711513000},"page":"1567-1582","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":82,"title":["On the Accuracy of Password Strength Meters"],"prefix":"10.1145","author":[{"given":"Maximilian","family":"Golla","sequence":"first","affiliation":[{"name":"Ruhr University Bochum, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Markus","family":"D\u00fcrmuth","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2018,10,15]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"8bit Solutions LLC. 2018. bitwarden (Web) -- Free Open Source Password Manager. https:\/\/bitwarden.com as of today.  8bit Solutions LLC. 2018. bitwarden (Web) -- Free Open Source Password Manager. https:\/\/bitwarden.com as of today."},{"key":"e_1_3_2_2_2_1","unstructured":"AgileBits Inc.. 2018. 1Password (Web) -- Password Manager. https:\/\/1password.com as of today.  AgileBits Inc.. 2018. 1Password (Web) -- Password Manager. https:\/\/1password.com as of today."},{"key":"e_1_3_2_2_3_1","unstructured":"Fabian Angelstorf and Franziska Juckel. 2017. OMEN v0.3.0 - C Implementation of a Markov Model-based Password Guesser. https:\/\/github.com\/RUB-SysSec\/OMEN as of today.  Fabian Angelstorf and Franziska Juckel. 2017. OMEN v0.3.0 - C Implementation of a Markov Model-based Password Guesser. https:\/\/github.com\/RUB-SysSec\/OMEN as of today."},{"key":"e_1_3_2_2_4_1","volume-title":"Statistics on Password Re-use and Adaptive Strength for Financial Accounts Security and Cryptography for Networks (SCN '14)","author":"Bailey Daniel V."},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/1595676.1595684"},{"key":"e_1_3_2_2_6_1","unstructured":"Sebastian Benvenuti. 2012. Ubiquity -- Ubuntu Should Encourage Stronger Passwords. https:\/\/bugs.launchpad.net\/ubuntu\/source\/ubiquity\/bug\/1044868 as of today.  Sebastian Benvenuti. 2012. Ubiquity -- Ubuntu Should Encourage Stronger Passwords. https:\/\/bugs.launchpad.net\/ubuntu\/source\/ubiquity\/bug\/1044868 as of today."},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(95)00003-Q"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.49"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.44"},{"key":"e_1_3_2_2_10_1","unstructured":"Mark Burnett. 2015. Today I Am Releasing Ten Million Passwords. https:\/\/xato.net\/today-i-am-releasing-ten-million-passwords-b6278bbe7495 as of today.  Mark Burnett. 2015. Today I Am Releasing Ten Million Passwords. https:\/\/xato.net\/today-i-am-releasing-ten-million-passwords-b6278bbe7495 as of today."},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/2206278"},{"key":"e_1_3_2_2_12_1","unstructured":"Javier Carranza and Contributors. 2018. Ubiquity -- Ubuntu Live CD Installer. https:\/\/launchpad.net\/ubuntu\/source\/ubiquity as of today.  Javier Carranza and Contributors. 2018. Ubiquity -- Ubuntu Live CD Installer. https:\/\/launchpad.net\/ubuntu\/source\/ubiquity as of today."},{"key":"e_1_3_2_2_13_1","volume-title":"Adaptive Password-Strength Meters from Markov Models Symposium on Network and Distributed System Security (NDSS '12)","author":"Castelluccia Claude"},{"key":"e_1_3_2_2_14_1","unstructured":"Dashlane Inc.. 2018. Dashlane (Windows) -- Password Manager. https:\/\/www.dashlane.com as of today.  Dashlane Inc.. 2018. Dashlane (Windows) -- Password Manager. https:\/\/www.dashlane.com as of today."},{"key":"e_1_3_2_2_15_1","unstructured":"\"dcopi\". 2013. NIST - Password Strength Meter Example. https:\/\/github.com\/dcopi\/PWStrength as of today.  \"dcopi\". 2013. NIST - Password Strength Meter Example. https:\/\/github.com\/dcopi\/PWStrength as of today."},{"key":"e_1_3_2_2_16_1","volume-title":"2014 a. From Very Weak to Very Strong: Analyzing Password-Strength Meters Symposium on Network and Distributed System Security (NDSS '14). ISOC","author":"Carn\u00e9 de Carnavalet Xavier"},{"key":"e_1_3_2_2_17_1","unstructured":"Xavier de Carn\u00e9 de Carnavalet and Mohammad Mannan. 2014 b. Password Multi-Checker Tool. https:\/\/madiba.encs.concordia.ca\/software\/passwordchecker\/ as of today.  Xavier de Carn\u00e9 de Carnavalet and Mohammad Mannan. 2014 b. Password Multi-Checker Tool. https:\/\/madiba.encs.concordia.ca\/software\/passwordchecker\/ as of today."},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813631"},{"key":"e_1_3_2_2_19_1","volume-title":"Password Strength: An Empirical Analysis. In Conference on Information Communications (INFOCOM '10)","author":"Dell'Amico Matteo","year":"2010"},{"key":"e_1_3_2_2_20_1","unstructured":"Dropbox Inc. and Contributors. 2017. zxcvbn v4.4.2 -- JavaScript Implementation of the zxcvbn Strength Meter. https:\/\/github.com\/dropbox\/zxcvbn as of today.  Dropbox Inc. and Contributors. 2017. zxcvbn v4.4.2 -- JavaScript Implementation of the zxcvbn Strength Meter. https:\/\/github.com\/dropbox\/zxcvbn as of today."},{"key":"e_1_3_2_2_21_1","volume-title":"OMEN: Faster Password Guessing Using an Ordered Markov Enumerator International Symposium on Engineering Secure Software and Systems (ESSoS '15)","author":"D\u00fcrmuth Markus","year":"2015"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2470654.2481329"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242661"},{"key":"e_1_3_2_2_24_1","volume-title":"van Oorschot","author":"Flor\u00eancio Dinei","year":"2014"},{"key":"e_1_3_2_2_25_1","volume-title":"Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts. In USENIX Security Symposium (SSYM '14)","author":"Flor\u00eancio Dinei"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2934663"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978416"},{"key":"e_1_3_2_2_28_1","volume-title":"2018 a. \"Will Any Password Do?\" Exploring Rate-Limiting on the Web Who Are You?! Adventures in Authentication Workshop (WAY '18)","author":"Golla Maximilian"},{"key":"e_1_3_2_2_29_1","unstructured":"Maximilian Golla Ibrahim Sertkaya and Markus D\u00fcrmuth. 2018 b. Password Strength Meter Comparison Website. https:\/\/password-meter-comparison.org as of today.  Maximilian Golla Ibrahim Sertkaya and Markus D\u00fcrmuth. 2018 b. Password Strength Meter Comparison Website. https:\/\/password-meter-comparison.org as of today."},{"key":"e_1_3_2_2_30_1","unstructured":"Jeremi M. Gosney. 2017. Nvidia GTX 1080 Ti Hashcat Benchmarks. https:\/\/gist.github.com\/epixoip\/ace60d09981be09544fdd35005051505 as of today.  Jeremi M. Gosney. 2017. Nvidia GTX 1080 Ti Hashcat Benchmarks. https:\/\/gist.github.com\/epixoip\/ace60d09981be09544fdd35005051505 as of today."},{"key":"e_1_3_2_2_31_1","volume-title":"Burr","author":"Grassi Paul A.","year":"2017"},{"key":"e_1_3_2_2_32_1","volume-title":"LPSE: Lightweight Password-Strength Estimation for Password Meters. Computers & Security","author":"Guo Yimin","year":"2018"},{"key":"e_1_3_2_2_33_1","volume-title":"Password Creation in the Presence of Blacklists. In Workshop on Usable Security (USEC '17)","author":"Habib Hana","year":"2017"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420966"},{"key":"e_1_3_2_2_35_1","unstructured":"Jason Huggins and SeleniumHQ Contributors. 2017. Selenium - Web Browser Automation. http:\/\/www.seleniumhq.org as of today.  Jason Huggins and SeleniumHQ Contributors. 2017. Selenium - Web Browser Automation. http:\/\/www.seleniumhq.org as of today."},{"key":"e_1_3_2_2_36_1","unstructured":"Troy Hunt. 2018. 500m Pwned Passwords List. https:\/\/haveibeenpwned.com\/Passwords as of today.  Troy Hunt. 2018. 500m Pwned Passwords List. https:\/\/haveibeenpwned.com\/Passwords as of today."},{"key":"e_1_3_2_2_37_1","volume-title":"The Benefits of Understanding Passwords. In USENIX Workshop on Hot Topics in Security (HotSec '12)","author":"Jakobsson Markus","year":"2012"},{"key":"e_1_3_2_2_38_1","unstructured":"JS Foundation. 2018. Appium -- Automation Made Awesome. http:\/\/appium.io as of today.  JS Foundation. 2018. Appium -- Automation Made Awesome. http:\/\/appium.io as of today."},{"key":"e_1_3_2_2_39_1","unstructured":"Keeper Security Inc.. 2018. Keeper (Web) -- Password Manager. https:\/\/keepersecurity.com as of today.  Keeper Security Inc.. 2018. Keeper (Web) -- Password Manager. https:\/\/keepersecurity.com as of today."},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.38"},{"key":"e_1_3_2_2_41_1","volume-title":"Password Security USENIX Security Workshop. USENIX","author":"Klein Daniel V.","year":"1990"},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1978942.1979321"},{"key":"e_1_3_2_2_43_1","unstructured":"LogMeIn Inc.. 2018. LastPass (Web) -- Password Manager. https:\/\/www.lastpass.com as of today.  LogMeIn Inc.. 2018. LastPass (Web) -- Password Manager. https:\/\/www.lastpass.com as of today."},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.50"},{"key":"e_1_3_2_2_45_1","unstructured":"William Melicher. 2017. Source Code -- Cracking Passwords with Neural Networks. https:\/\/github.com\/cupslab\/neural_network_cracking as of today.  William Melicher. 2017. Source Code -- Cracking Passwords with Neural Networks. https:\/\/github.com\/cupslab\/neural_network_cracking as of today."},{"key":"e_1_3_2_2_46_1","volume-title":"Modeling Password Guessability Using Neural Networks USENIX Security Symposium (SSYM '16)","author":"Melicher William"},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/359168.359172"},{"key":"e_1_3_2_2_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102168"},{"key":"e_1_3_2_2_49_1","unstructured":"Ronald Oussoren. 2018. PyObjC -- The Python Objective-C Bridge. https:\/\/pythonhosted.org\/pyobjc\/ as of today.  Ronald Oussoren. 2018. PyObjC -- The Python Objective-C Bridge. https:\/\/pythonhosted.org\/pyobjc\/ as of today."},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133973"},{"key":"e_1_3_2_2_51_1","unstructured":"Dominik Reichl. 2018. KeePass (Windows) -- Password Manager. http:\/\/keepass.info\/help\/kb\/pw_quality_est.html as of today.  Dominik Reichl. 2018. KeePass (Windows) -- Password Manager. http:\/\/keepass.info\/help\/kb\/pw_quality_est.html as of today."},{"key":"e_1_3_2_2_52_1","unstructured":"Dominik Reichl. 2018. KPScript (Windows) -- Scripting KeePass. http:\/\/keepass.info\/help\/v2_dev\/scr_index.html as of today.  Dominik Reichl. 2018. KPScript (Windows) -- Scripting KeePass. http:\/\/keepass.info\/help\/v2_dev\/scr_index.html as of today."},{"key":"e_1_3_2_2_53_1","volume-title":"USENIX Workshop on Hot Topics in Security (HotSec '10)","author":"Schechter Stuart","year":"2010"},{"key":"e_1_3_2_2_54_1","unstructured":"Sinew Software Systems. 2016. Enpass Release Notes -- Use of the zxcvbn Strength Meter. https:\/\/www.enpass.io\/release-notes\/windowspc\/ as of today.  Sinew Software Systems. 2016. Enpass Release Notes -- Use of the zxcvbn Strength Meter. https:\/\/www.enpass.io\/release-notes\/windowspc\/ as of today."},{"key":"e_1_3_2_2_55_1","unstructured":"Sinew Software Systems. 2018. Enpass (Windows) -- Password Manager. https:\/\/www.enpass.io as of today.  Sinew Software Systems. 2018. Enpass (Windows) -- Password Manager. https:\/\/www.enpass.io as of today."},{"key":"e_1_3_2_2_56_1","volume-title":"Observing Reusable Password Choices. In USENIX Security Symposium (SSYM '92)","author":"Spafford Eugene H.","year":"1992"},{"key":"e_1_3_2_2_57_1","unstructured":"Richard Tilley. 2018. Blooming Password. https:\/\/www.bloomingpassword.fun as of today.  Richard Tilley. 2018. Blooming Password. https:\/\/www.bloomingpassword.fun as of today."},{"key":"e_1_3_2_2_58_1","unstructured":"Blase Ur. 2017. Source Code -- Data-Driven Password Meter. https:\/\/github.com\/cupslab\/password_meter as of today.  Blase Ur. 2017. Source Code -- Data-Driven Password Meter. https:\/\/github.com\/cupslab\/password_meter as of today."},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3026050"},{"key":"e_1_3_2_2_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858546"},{"key":"e_1_3_2_2_61_1","volume-title":"The Effect of Strength Meters on Password Creation USENIX Security Symposium (SSYM '12)","author":"Ur Blase","year":"2012"},{"key":"e_1_3_2_2_62_1","volume-title":"Measuring Real-World Accuracies and Biases in Modeling Password Guessability USENIX Security Symposium (SSYM '15)","author":"Ur Blase","year":"2015"},{"key":"e_1_3_2_2_63_1","unstructured":"Ashlee Vance. 2010. If Your Password Is 123456 Just Make It HackMe. http:\/\/www.nytimes.com\/2010\/01\/21\/technology\/21password.html as of today.  Ashlee Vance. 2010. If Your Password Is 123456 Just Make It HackMe. http:\/\/www.nytimes.com\/2010\/01\/21\/technology\/21password.html as of today."},{"key":"e_1_3_2_2_64_1","volume-title":"On the Semantic Patterns of Passwords and their Security Impact Symposium on Network and Distributed System Security (NDSS '14)","author":"Veras Rafael"},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.60"},{"key":"e_1_3_2_2_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978339"},{"key":"e_1_3_2_2_67_1","volume-title":"The Password Doesn't Fall Far: How Service Influences Password Choice Who Are You?! Adventures in Authentication Workshop (WAY '18)","author":"Wei Miranda"},{"key":"e_1_3_2_2_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866327"},{"key":"e_1_3_2_2_69_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.8"},{"key":"e_1_3_2_2_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.8"},{"key":"e_1_3_2_2_71_1","volume-title":"USENIX Security Symposium (SSYM '16)","author":"Wheeler Daniel Lowe","year":"2016"}],"event":{"name":"CCS '18: 2018 ACM SIGSAC Conference on Computer and Communications Security","location":"Toronto Canada","acronym":"CCS '18","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243734.3243769","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3243734.3243769","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:08:18Z","timestamp":1750212498000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3243734.3243769"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,10,15]]},"references-count":71,"alternative-id":["10.1145\/3243734.3243769","10.1145\/3243734"],"URL":"https:\/\/doi.org\/10.1145\/3243734.3243769","relation":{},"subject":[],"published":{"date-parts":[[2018,10,15]]},"assertion":[{"value":"2018-10-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}