Children continue to use technology at an increasing rate, more and more of which require authentication via usernames and passwords.We seek to understand how children ages 5-11 years old create and use their credentials. We investigate children’s username and password understanding and practices from the perspective of both children and adults within the context of three security categories: credential composition (e.g. length of password), performance (e.g. time to enter), and credential mechanisms (e.g; a pattern or characters). We conducted a semi-structured interview with 22 children and an online survey with 33 adult participants (parents and teachers) to determine their practices and involvement in facilitating authentication for their children. Our study illustrates how children have a limited understanding of authentication, and that there are differences between children’s and adult’s understanding of good authentication and security practices, and what they actually do.
This document was originally published in IDC '19: Proceedings of the 18th ACM International Conference on Interaction Design and Children by Association for Computing Machinery. Copyright restrictions may apply. doi: 10.1145/3311927.3325327
Ratakonda, Dhanush Kumar; French, Tyler; and Fails, Jerry Alan. (2019). "“My Name is My Password:” Understanding Children’s Authentication Practices". IDC '19: Proceedings of the 18th ACM International Conference on Interaction Design and Children, 501-507. http://dx.doi.org/10.1145/3311927.3325327