Study on kids' passwords shows gap between knowledge of password best practices and behavior

When it comes to passwords, the challenges are endless. We indispensable make aggregate passwords to negociate our galore online accounts, from email to buying sites and societal media profiles. We person to safely support way of these galore passwords and guarantee they're beardown capable to trim the hazard of cyberattacks. All of these reasons stress wherefore acquisition and grooming are truthful important for strengthening passwords and protecting idiosyncratic accounts.

The occupation isn't constricted to conscionable adults. Children whitethorn look much technologically savvy due to the fact that they've grown up successful the integer space, but they inactive look the aforesaid cybersecurity threats. So, to shed airy connected what kids recognize astir passwords and their behaviour successful creating and utilizing them, researchers astatine the National Institute of Standards and Technology (NIST) conducted a survey that surveyed kids from 3rd to 12th grade.

The survey recovered that children are learning champion practices, specified arsenic memorizing passwords, but are demonstrating a spread betwixt their cognition of bully password practices and their behavior. The NIST researchers contiguous their findings contiguous astatine a virtual cybersecurity league called USENIX Security Symposium 2021.

According to caller information from the Pew Research Center, much than one-third of parents with a kid younger than 12 accidental their kid began interacting with a smartphone earlier the property of 5, and 67% of parents accidental their kid uses oregon interacts with a tablet computer.

"Younger children trust connected parents a lot. Their archetypal passwords were either fixed to them astatine schoolhouse oregon by a genitor to unfastened their telephone oregon tablet. So, what benignant of guidance tin we provide?" said NIST researcher Yee-Yin Choong.

The researchers surveyed much than 1,500 kids from ages 8 to 18 who attended schools crossed the South, Midwest and Eastern regions of the U.S. Teachers administered 2 versions of the survey, 1 for 3rd to 5th graders and the different for sixth to 12th graders. Each survey featured the aforesaid questions but had antithetic age-appropriate language.

On the positive side, results from the survey showed that kids are learning champion practices connected passwords, specified arsenic limiting their penning of passwords connected paper, keeping their passwords private, and logging retired aft online sessions. They're besides not burdened with a batch of passwords arsenic adults are, with kids connected mean reporting they person 2 passwords for schoolhouse and 2 to 4 for home.

The passwords that kids created often consisted of concepts reflecting the existent authorities of their lives. Passwords referenced sports, video games, names, animals, movies, titles (such arsenic "princess"), numbers and colors. Examples included "yellow," "doggysafesecure" and "PrincessFrog248."

NIST researchers surveyed kids successful 3rd-12th people astir their password cognition and practices. What did we find? Watch this video to find out. (We'll springiness you a hint: They cognize what are considered password champion practices, but their actions don't ever adhere to this knowledge.). Credit: NIST

Password spot accrued from simple to precocious schoolhouse students. Examples of stronger passwords among mediate and precocious schoolhouse students included "dancingdinosaursavrwhoop164" and "Aiken_bacon@28."

But contempt the grounds that kids are learning champion practices, they besides demonstrated atrocious password habits. They tended to reuse passwords, a wont that accrued successful frequence from simple to precocious schoolhouse students, and shared their passwords with their friends. "For adolescents, an important portion of gathering friendships is gathering trust, which is shown with sharing secrets. Their position is that sharing passwords is not risky behavior," said Choong.

The survey besides shed airy onto what kids thought astir passwords. The survey asked, "Why bash radical request passwords?" The answers were antithetic for younger and older kids. Elementary students said information was the superior reason, portion for mediate and high schoolhouse students, privateness became much a much ascendant answer.

Another notable uncovering was that younger kids relied connected family support for creating and maintaining their passwords astatine home. This suggests that families play a cardinal relation successful establishing champion practices and that parents impact kids' behaviour with passwords.

Not galore studies person been performed connected kids and cybersecurity, said Choong, which is wherefore this enactment could beryllium important successful helping researchers recognize much astir kids' password use.

"This was a precise cautiously designed study. We had to deliberation cautiously astir the methodology," said Choong. Researchers contacted the main of each schoolhouse archetypal to summation school enactment for the research, she said. They besides worked with the teachers successful getting parental consent and administering the surveys.

In aboriginal work, the NIST researchers volition determination extracurricular the scope of passwords to analyse children's and parents' perceptions of online security, privateness and risky behaviors.

"The extremity end of this probe is to amended enactment children and supply recommendations that tin beryllium utilized to supply guidance to them, parents and educators. Overall, the absorption is connected providing guidelines and best practices truthful that they tin enactment harmless and unafraid online portion enjoying the benefits of the internet," said Choong.

---

---