Passphrase Authentication and Individual Physiological Differences.

Computer passphrase authentication designed with usability consideration encourages memorability. This passphrase study suggests successful recollection using an assembly of meaningful word groups evidenced by individual physiological performance measurements. Participant data collected at the Hawaiʻi Interdisciplinary Neurobehavioral and Technology Lab (HINT) demonstrate physiological responses to passphrase decision making. The results from university students indicate psychophysiological influences predict passphrase characteristics. The repeated measures investigation of user-created and system-imposed passphrases contribute understanding toward user authentication selection that supports encoding and recalling a secret, unlike the current traditional password composed of alphanumeric and special characters. Passphrases constructed with usability considerations support security compliance requirements. This explanatory study employs pilot-tested passphrases designed to reveal predictive psychophysiological behavior. Overall results indicate user-created passphrases produce less cognitive load stressors on working memory than system-imposed passphrases. However, physiological measurements from heart rate, skin conductance, and the facial corrugator supercilii muscle signify a mixture of passphrase types that imply memorability. Study results suggest a platform for future passphrase design research of longer passwords that inform security access, improve memorability, and enhance usability evaluated by human-centered performance.