Managing all your PINs is difficult. Banks acknowledge this by allowing and facilitating PIN#R##N#changes. However, choosing secure PINs is a difficult task for humans as they are incapable of#R##N#consciously generating randomness. This leads to certain PINs being chosen more frequently#R##N#than others, which in turn increases the danger of someone else guessing correctly. We#R##N#investigate different methods of supporting PIN changes and report on an evaluation of these#R##N#methods in a study with 152 participants. Our contribution is twofold: We introduce an#R##N#alternative to system-generated random PINs, which considers people’s preferred#R##N#memorisation strategy, and, secondly, we provide indication that presenting guidance on how#R##N#to avoid insecure PINs does indeed nudge people towards more secure PIN choices when they#R##N#are in the process of changing their PINs.
['Andreas Gutmann', 'Melanie Volkamer', 'Karen Renaud']
Memorable And Secure: How Do You Choose Your PIN?