{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,21]],"date-time":"2026-06-21T01:49:24Z","timestamp":1782006564786,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,5,31]],"date-time":"2026-05-31T00:00:00Z","timestamp":1780185600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1145\/3797246.3803036","type":"proceedings-article","created":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T12:08:10Z","timestamp":1780056490000},"page":"1-8","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Understanding Password Preferences, Memorability, and Security through a Human-Centered Lens"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-9310-2930","authenticated-orcid":false,"given":"Duru","family":"Paker","sequence":"first","affiliation":[{"name":"Human-Centered Technologies for Learning, Technical University of Munich, Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3390-6154","authenticated-orcid":false,"given":"S\u00fcleyman","family":"\u00d6zdel","sequence":"additional","affiliation":[{"name":"Human-Centered Technologies for Learning, Technical University of Munich, Munich, Germany and Munich Center for Machine Learning (MCML), Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3146-4484","authenticated-orcid":false,"given":"Enkelejda","family":"Kasneci","sequence":"additional","affiliation":[{"name":"Human-Centered Technologies for Learning, Technical University of Munich, Munich, Germany and Munich Center for Machine Learning, Technical University of Munich, Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,5,31]]},"reference":[{"key":"e_1_3_3_2_2_1","doi-asserted-by":"publisher","unstructured":"Yasmeen Abdrabou Yomna Abdelrahman Mohamed Khamis and Florian Alt. 2021a. Think Harder! Investigating the Effect of Password Strength on Cognitive Load during Password Creation. Conference on Human Factors in Computing Systems - Proceedings (5 2021). 10.1145\/3411763.3451636","DOI":"10.1145\/3411763.3451636"},{"key":"e_1_3_3_2_3_1","doi-asserted-by":"publisher","unstructured":"Yasmeen Abdrabou Johannes Sch\u00fctte Ahmed Shams Ken Pfeuffer Daniel Buschek Mohamed Khamis and Florian Alt. 2022. \"Your Eyes Tell You Have Used This Password Before\": Identifying Password Reuse from Gaze and Keystroke Dynamics. Conference on Human Factors in Computing Systems - Proceedings (4 2022). 10.1145\/3491102.3517531\/SUPPL_FILE\/3491102.3517531-VIDEO-PREVIEW.MP4","DOI":"10.1145\/3491102.3517531\/SUPPL_FILE\/3491102.3517531-VIDEO-PREVIEW.MP4"},{"key":"e_1_3_3_2_4_1","doi-asserted-by":"publisher","unstructured":"Yasmeen Abdrabou Ahmed Shams Mohamed\u00a0Omar Mantawy Anam\u00a0Ahmad Khan Mohamed Khamis Florian Alt and Yomna Abdelrahman. 2021b. GazeMeter: Exploring the Usage of Gaze Behaviour to Enhance Password Assessments. Eye Tracking Research and Applications Symposium (ETRA) PartF169256 (5 2021). 10.1145\/3448017.3457384","DOI":"10.1145\/3448017.3457384"},{"key":"e_1_3_3_2_5_1","unstructured":"DeepSeek AI. 2025. DeepSeek-Chat. https:\/\/www.deepseek.com Accessed via API at https:\/\/api.deepseek.com August 2025."},{"key":"e_1_3_3_2_6_1","unstructured":"Mary Alavanza. 2024. Singapore-based firm fined S$74K for data breach due to weak password affecting over 500K users - Singapore News. https:\/\/theindependent.sg\/singapore-based-firm-fined-s74k-for-data-breach-due-to-weak-password-affecting-over-500k-users\/"},{"key":"e_1_3_3_2_7_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23268"},{"key":"e_1_3_3_2_8_1","doi-asserted-by":"publisher","unstructured":"Siyuan Chen and Julien Epps. 2014. Using Task-Induced Pupil Diameter and Blink Rate to Infer Cognitive Load. Human\u2013Computer Interaction 29 (7 2014) 390\u2013413. Issue 4. 10.1080\/07370024.2014.892428","DOI":"10.1080\/07370024.2014.892428"},{"key":"e_1_3_3_2_9_1","doi-asserted-by":"publisher","unstructured":"Siyuan Chen Julien Epps Natalie Ruiz and Fang Chen. 2011. Eye activity as a measure of human mental effort in HCI. International Conference on Intelligent User Interfaces Proceedings IUI (2011) 315\u2013318. 10.1145\/1943403.1943454","DOI":"10.1145\/1943403.1943454"},{"key":"e_1_3_3_2_10_1","doi-asserted-by":"publisher","unstructured":"Kuei\u00a0Pin Chien Cheng\u00a0Yue Tsai Hsiu\u00a0Ling Chen Wen\u00a0Hua Chang and Sufen Chen. 2015. Learning differences and eye fixation patterns in virtual and physical science laboratories. Computers & Education 82 (3 2015) 191\u2013201. 10.1016\/J.COMPEDU.2014.11.023","DOI":"10.1016\/J.COMPEDU.2014.11.023"},{"key":"e_1_3_3_2_11_1","unstructured":"N. Cubrilovic. 2009. RockYou Hack: From Bad To Worse. https:\/\/techcrunch.com\/2009\/12\/14\/rockyou-hack-security-myspace-facebook-passwords\/. Accessed: 2025-09-09."},{"key":"e_1_3_3_2_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom50675.2020.00211"},{"key":"e_1_3_3_2_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813631"},{"key":"e_1_3_3_2_14_1","doi-asserted-by":"publisher","unstructured":"Rahul Gavas Debatri Chatterjee and Aniruddha Sinha. 2017. Estimation of cognitive load based on the pupil size dilation. 2017 IEEE International Conference on Systems Man and Cybernetics SMC 2017 2017-January (11 2017) 1499\u20131504. 10.1109\/SMC.2017.8122826","DOI":"10.1109\/SMC.2017.8122826"},{"key":"e_1_3_3_2_15_1","doi-asserted-by":"publisher","unstructured":"Joseph\u00a0H. Goldberg and Xerxes\u00a0P. Kotval. 1999. Computer interface evaluation using eye movements: methods and constructs. International Journal of Industrial Ergonomics 24 (10 1999) 631\u2013645. Issue 6. 10.1016\/S0169-8141(98)00068-7","DOI":"10.1016\/S0169-8141(98)00068-7"},{"key":"e_1_3_3_2_16_1","doi-asserted-by":"publisher","unstructured":"Paul\u00a0A Grassi James\u00a0L Fenton Elaine\u00a0M Newton Ray\u00a0A Perlner Andrew\u00a0R Regenscheid William\u00a0E Burr Justin\u00a0P Richer Naomi\u00a0B Lefkovitz Jamie\u00a0M Danker Yee-Yin Choong Kristen\u00a0K Greene and Mary\u00a0F Theofanos. 2017. Withdrawn NIST Technical Series Publication Warning Notice Withdrawn Publication Series\/Number NIST Special Publication 800-63B Title Digital Identity Guidelines: Authentication and Lifecycle Management Publication Date(s) Superseding Publication(s) (if \u2026. (2017). 10.6028\/NIST.SP.800-63B-4","DOI":"10.6028\/NIST.SP.800-63B-4"},{"key":"e_1_3_3_2_17_1","doi-asserted-by":"publisher","unstructured":"Briland Hitaj Paolo Gasti Giuseppe Ateniese and Fernando Perez-Cruz. 2019. PassGAN: A deep learning approach for password guessing. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 11464 LNCS (2019) 217\u2013237. 10.1007\/978-3-030-21568-2_11","DOI":"10.1007\/978-3-030-21568-2_11"},{"key":"e_1_3_3_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1753326.1753384"},{"key":"e_1_3_3_2_19_1","unstructured":"Enkelejda Kasneci Hong Gao Suleyman Ozdel Virmarie Maquiling Enkeleda Thaqi Carrie Lau Yao Rong Gjergji Kasneci and Efe Bozkir. 2024. Introduction to Eye Tracking: A Hands-On Tutorial for Students and Practitioners. (4 2024). https:\/\/arxiv.org\/pdf\/2404.15435"},{"key":"e_1_3_3_2_20_1","doi-asserted-by":"publisher","unstructured":"Jung-Chun Liu Kuei-An Li Su-Ling Yeh and Shao-Yi Chien. 2022. Assessing Perceptual Load and Cognitive Load by Fixation-Related Information of Eye Movements. Sensors 22 (02 2022) 1187. 10.3390\/s22031187","DOI":"10.3390\/s22031187"},{"key":"e_1_3_3_2_21_1","first-page":"175","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Melicher William","year":"2016","unstructured":"William Melicher, Blase Ur, Sean\u00a0M Segreti, Saranga Komanduri, Lujo Bauer, Nicolas Christin, and Lorrie\u00a0Faith Cranor. 2016. Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks. In 25th USENIX Security Symposium (USENIX Security 16) (Austin, TX). USENIX Association, 175\u2013191. https:\/\/www.usenix.org\/conference\/usenixsecurity16\/technical-sessions\/presentation\/melicher"},{"key":"e_1_3_3_2_22_1","doi-asserted-by":"publisher","unstructured":"Maryam\u00a0M. Najafabadi Taghi\u00a0M. Khoshgoftaar Clifford Kemp Naeem Seliya and Richard Zuech. 2014. Machine learning for detecting brute force attacks at the network level. Proceedings - IEEE 14th International Conference on Bioinformatics and Bioengineering BIBE 2014 (2 2014) 379\u2013385. 10.1109\/BIBE.2014.73","DOI":"10.1109\/BIBE.2014.73"},{"key":"e_1_3_3_2_23_1","doi-asserted-by":"publisher","unstructured":"Thi Thu\u00a0Trang Nguyen and Quang\u00a0Uy Nguyen. 2015. An analysis of Persuasive Text Passwords. Proceedings of 2015 2nd National Foundation for Science and Technology Development Conference on Information and Computer Science NICS 2015 (10 2015) 28\u201333. 10.1109\/NICS.2015.7302207","DOI":"10.1109\/NICS.2015.7302207"},{"key":"e_1_3_3_2_24_1","unstructured":"OpenAI. 2024. GPT-4o. https:\/\/openai.com\/index\/hello-gpt-4o\/ Accessed via OpenAI API August 2025."},{"key":"e_1_3_3_2_25_1","doi-asserted-by":"publisher","unstructured":"Suleyman Ozdel Efe Bozkir and Enkelejda Kasneci. 2024. Privacy-preserving scanpath comparison for pervasive eye tracking. Proceedings of the ACM on Human-Computer Interaction 8 ETRA (2024) 1\u201328. 10.1145\/3655605","DOI":"10.1145\/3655605"},{"key":"e_1_3_3_2_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00056"},{"key":"e_1_3_3_2_27_1","doi-asserted-by":"publisher","unstructured":"Robert\u00a0W. Proctor Mei\u00a0Ching Lien Kim Phuong\u00a0L. Vu E.\u00a0Eugene Schultz and Gavriel Salvendy. 2002. Improving computer security for authentication of users: Influence of proactive password restrictions. Behavior Research Methods Instruments and Computers 34 (2002) 163\u2013169. Issue 2. 10.3758\/BF03195438","DOI":"10.3758\/BF03195438"},{"key":"e_1_3_3_2_28_1","unstructured":"Javier Rando Fernando Perez-Cruz and Briland Hitaj. 2023a. javirandor\/passgpt-16characters \u00b7 Hugging Face. https:\/\/huggingface.co\/javirandor\/passgpt-16characters Published: June 2 2023; Accessed: 26 January 2026."},{"key":"e_1_3_3_2_29_1","unstructured":"Javier Rando Fernando Perez-Cruz and Briland Hitaj. 2023b. PassGPT: Password Modeling and (Guided) Generation with Large Language Models. (6 2023). https:\/\/arxiv.org\/abs\/2306.01545v2"},{"key":"e_1_3_3_2_30_1","doi-asserted-by":"publisher","unstructured":"Dario\u00a0D. Salvucci and Joseph\u00a0H. Goldberg. 2000. Identifying fixations and saccades in eye-tracking protocols. Proceedings of the Eye Tracking Research and Applications Symposium 2000 (2000) 71\u201378. 10.1145\/355017.355028","DOI":"10.1145\/355017.355028"},{"key":"e_1_3_3_2_31_1","doi-asserted-by":"publisher","unstructured":"C.\u00a0E. Shannon. 1948. A Mathematical Theory of Communication. Bell System Technical Journal 27 (1948) 379\u2013423. Issue 3. 10.1002\/J.1538-7305.1948.TB01338.X","DOI":"10.1002\/J.1538-7305.1948.TB01338.X"},{"key":"e_1_3_3_2_32_1","doi-asserted-by":"publisher","unstructured":"Richard Shay Saranga Komanduri Adam\u00a0L Durity Phillip\u00a0(Seyoung) Huh Michelle\u00a0L Mazurek Sean\u00a0M Segreti Blase Ur Lujo Bauer Nicolas Christin and Lorrie\u00a0Faith Cranor. 2016. Designing Password Policies for Strength and Usability. ACM Trans. Inf. Syst. Secur. 18 (5 2016). Issue 4. 10.1145\/2891411","DOI":"10.1145\/2891411"},{"key":"e_1_3_3_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1837110.1837113"},{"key":"e_1_3_3_2_34_1","unstructured":"Xingyu Su Xiaojie Zhu Yang Li Yong Li Chi Chen and Paulo Esteves-Ver\u00edssimo. 2024. PagPassGPT: Pattern Guided Password Guessing via Generative Pretrained Transformer. (4 2024). http:\/\/arxiv.org\/abs\/2404.04886"},{"key":"e_1_3_3_2_35_1","doi-asserted-by":"publisher","unstructured":"Mariam\u00a0M. Taha Taqwa\u00a0A. Alhaj Ala\u00a0E. Moktar Azza\u00a0H. Salim and Settana\u00a0M. Abdullah. 2013. On password strength measurements: Password entropy and password quality. Proceedings - 2013 International Conference on Computer Electrical and Electronics Engineering: \u2019Research Makes a Difference\u2019 ICCEEE 2013 (2013) 497\u2013501. 10.1109\/ICCEEE.2013.6633989","DOI":"10.1109\/ICCEEE.2013.6633989"},{"key":"e_1_3_3_2_36_1","doi-asserted-by":"publisher","unstructured":"Binh Le\u00a0Thanh Thai and Hidema Tanaka. 2024. A statistical Markov-based password strength meter. Internet of Things 25 (2024) 101057. 10.1016\/j.iot.2023.101057","DOI":"10.1016\/j.iot.2023.101057"},{"key":"e_1_3_3_2_37_1","unstructured":"Tobii. 2023. Tobii Pro Lab Gaze Filter. https:\/\/connect.tobii.com\/s\/article\/Gaze-Filter-functions-and-effects?language=en_US Published: June 30 2023."},{"key":"e_1_3_3_2_38_1","unstructured":"Blase Ur Patrick Kelley Saranga Komanduri Joel Lee Michael Maass Michelle Mazurek Timothy Passaro Richard Shay Timothy Vidas Lujo Bauer Nicolas Christin Lorrie Cranor Serge Egelman and Julio L\u00f3pez. 2012b. Helping users create better passwords. USENIX ;login: 37 (12 2012). https:\/\/www.researchgate.net\/publication\/261723603_Helping_users_create_better_passwords"},{"key":"e_1_3_3_2_39_1","volume-title":"How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation","author":"Ur Blase","year":"2012","unstructured":"Blase Ur, Patrick\u00a0Gage Kelley, Saranga Komanduri, Joel Lee, Michael Maass, Michelle\u00a0L. Mazurek, Timothy Passaro, Richard Shay, Timothy Vidas, Lujo Bauer, Nicolas Christin, and Lorrie\u00a0Faith Cranor. 2012a. How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation. 65\u201380 pages. https:\/\/www.cs.bham.ac.uk\/\u00a0garciaf\/publications\/Gone_in_360_seconds_Hijacking_with_Hitag2_poster_2012.pdf"},{"key":"e_1_3_3_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866327"},{"key":"e_1_3_3_2_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom50675.2020.00155"},{"key":"e_1_3_3_2_42_1","doi-asserted-by":"publisher","unstructured":"Yinqian Zhang Fabian Monrose and Michael\u00a0K. Reiter. 2010. The security of modern password expiration: An algorithmic framework and empirical analysis. Proceedings of the ACM Conference on Computer and Communications Security (2010) 176\u2013186. 10.1145\/1866307.1866328;WGROUP:STRING:ACM","DOI":"10.1145\/1866307.1866328;WGROUP:STRING:ACM"}],"event":{"name":"ETRA '26: 2026 Symposium on Eye Tracking Research and Applications","location":"Marrakesh Morocco","acronym":"ETRA '26","sponsor":["SIGCHI ACM Special Interest Group on Computer-Human Interaction","SIGGRAPH ACM Special Interest Group on Computer Graphics and Interactive Techniques"]},"container-title":["Proceedings of the 2026 Symposium on Eye Tracking Research and Applications"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3797246.3803036","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,21]],"date-time":"2026-06-21T01:06:43Z","timestamp":1782004003000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3797246.3803036"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,31]]},"references-count":41,"alternative-id":["10.1145\/3797246.3803036","10.1145\/3797246"],"URL":"https:\/\/doi.org\/10.1145\/3797246.3803036","relation":{},"subject":[],"published":{"date-parts":[[2026,5,31]]},"assertion":[{"value":"2026-05-31","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}