Password Typos and How to Correct Them Securely

Explore the first comprehensive treatment of typo-tolerant password authentication for arbitrary user-selected passwords in this 20-minute IEEE conference talk. Delve into the analysis of utility and security of typo-tolerance schemes, quantifying the types and rates of typos made by users through studies on Amazon Mechanical Turk and Dropbox's production login infrastructure. Discover how correcting a few simple typos can reduce login delays and increase successful logins by 3%. Examine the framework for reasoning about typo-tolerance and investigate the balance between security and usability of passwords. Learn about practical strategies for securely implementing typo-tolerance that are proven to be as secure as schemes that always reject mistyped passwords.