Response-efficacy messages produce stronger passwords than self-efficacy messages … for now: A longitudinal experimental study of the efficacy of coping message types on password creation behaviour
User non-adherence to password guidelines remains a persistent challenge in the fight against cyberattacks. Many users circumvent password requirements by choosing weak, easy-to-guess passwords. This study tests the effectiveness of coping messages (i.e., self-efficacy, response efficacy, and a comb...
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Elsevier
2025-03-01
|
| Series: | Computers in Human Behavior Reports |
| Subjects: | |
| Online Access: | http://www.sciencedirect.com/science/article/pii/S2451958825000302 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1823861158356975616 |
|---|---|
| author | Joelle Simon Steven J. Watson Iris van Sintemaartensdijk |
| author_facet | Joelle Simon Steven J. Watson Iris van Sintemaartensdijk |
| author_sort | Joelle Simon |
| collection | DOAJ |
| description | User non-adherence to password guidelines remains a persistent challenge in the fight against cyberattacks. Many users circumvent password requirements by choosing weak, easy-to-guess passwords. This study tests the effectiveness of coping messages (i.e., self-efficacy, response efficacy, and a combination of self-efficacy and response efficacy) to improve the strength of passwords created by users. Participants (N = 221) were instructed to create passwords for three fictional online accounts after receiving password creation instructions that incorporated one of the aforementioned coping message types. They then reported their intentions to adopt strong passwords post-intervention and reported on their actual password practices four weeks later. Findings indicate that the strength of the created passwords did not improve based on the messages participants received, and those who received self-efficacy messages actually created passwords with lower entropy. The intention to adopt strong passwords was only elevated for participants who received combined self-efficacy and response efficacy condition, and neither message type had a clear impact on user behaviour after four weeks. This study paves the way for developing more effective messages based on the Protection Motivation Theory (PMT) constructs to encourage safe password behaviour. |
| format | Article |
| id | doaj-art-128c2eb84f13449f878e39956a69a0eb |
| institution | Kabale University |
| issn | 2451-9588 |
| language | English |
| publishDate | 2025-03-01 |
| publisher | Elsevier |
| record_format | Article |
| series | Computers in Human Behavior Reports |
| spelling | doaj-art-128c2eb84f13449f878e39956a69a0eb2025-02-10T04:34:38ZengElsevierComputers in Human Behavior Reports2451-95882025-03-0117100615Response-efficacy messages produce stronger passwords than self-efficacy messages … for now: A longitudinal experimental study of the efficacy of coping message types on password creation behaviourJoelle Simon0Steven J. Watson1Iris van Sintemaartensdijk2Universiteit Twente, Department of Psychology of Conflict, Risk and Safety, the NetherlandsUniversiteit Twente, Department of Psychology of Conflict, Risk and Safety, the NetherlandsCorresponding author. Department of Psychology of Conflict, Risk and Safety, De Zul 10, 7522, NJ, the Netherlands.; Universiteit Twente, Department of Psychology of Conflict, Risk and Safety, the NetherlandsUser non-adherence to password guidelines remains a persistent challenge in the fight against cyberattacks. Many users circumvent password requirements by choosing weak, easy-to-guess passwords. This study tests the effectiveness of coping messages (i.e., self-efficacy, response efficacy, and a combination of self-efficacy and response efficacy) to improve the strength of passwords created by users. Participants (N = 221) were instructed to create passwords for three fictional online accounts after receiving password creation instructions that incorporated one of the aforementioned coping message types. They then reported their intentions to adopt strong passwords post-intervention and reported on their actual password practices four weeks later. Findings indicate that the strength of the created passwords did not improve based on the messages participants received, and those who received self-efficacy messages actually created passwords with lower entropy. The intention to adopt strong passwords was only elevated for participants who received combined self-efficacy and response efficacy condition, and neither message type had a clear impact on user behaviour after four weeks. This study paves the way for developing more effective messages based on the Protection Motivation Theory (PMT) constructs to encourage safe password behaviour.http://www.sciencedirect.com/science/article/pii/S2451958825000302Online safetyPassword strengthCoping messagesSelf-efficacyResponse efficacyProtection motivation theory |
| spellingShingle | Joelle Simon Steven J. Watson Iris van Sintemaartensdijk Response-efficacy messages produce stronger passwords than self-efficacy messages … for now: A longitudinal experimental study of the efficacy of coping message types on password creation behaviour Computers in Human Behavior Reports Online safety Password strength Coping messages Self-efficacy Response efficacy Protection motivation theory |
| title | Response-efficacy messages produce stronger passwords than self-efficacy messages … for now: A longitudinal experimental study of the efficacy of coping message types on password creation behaviour |
| title_full | Response-efficacy messages produce stronger passwords than self-efficacy messages … for now: A longitudinal experimental study of the efficacy of coping message types on password creation behaviour |
| title_fullStr | Response-efficacy messages produce stronger passwords than self-efficacy messages … for now: A longitudinal experimental study of the efficacy of coping message types on password creation behaviour |
| title_full_unstemmed | Response-efficacy messages produce stronger passwords than self-efficacy messages … for now: A longitudinal experimental study of the efficacy of coping message types on password creation behaviour |
| title_short | Response-efficacy messages produce stronger passwords than self-efficacy messages … for now: A longitudinal experimental study of the efficacy of coping message types on password creation behaviour |
| title_sort | response efficacy messages produce stronger passwords than self efficacy messages for now a longitudinal experimental study of the efficacy of coping message types on password creation behaviour |
| topic | Online safety Password strength Coping messages Self-efficacy Response efficacy Protection motivation theory |
| url | http://www.sciencedirect.com/science/article/pii/S2451958825000302 |
| work_keys_str_mv | AT joellesimon responseefficacymessagesproducestrongerpasswordsthanselfefficacymessagesfornowalongitudinalexperimentalstudyoftheefficacyofcopingmessagetypesonpasswordcreationbehaviour AT stevenjwatson responseefficacymessagesproducestrongerpasswordsthanselfefficacymessagesfornowalongitudinalexperimentalstudyoftheefficacyofcopingmessagetypesonpasswordcreationbehaviour AT irisvansintemaartensdijk responseefficacymessagesproducestrongerpasswordsthanselfefficacymessagesfornowalongitudinalexperimentalstudyoftheefficacyofcopingmessagetypesonpasswordcreationbehaviour |