MFA is a Waste of Time! Understanding Negative Connotation Towards MFA Applications via User Generated Content

In Proceedings of the Thriteenth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2019)

10 Pages Posted: 19 Aug 2019

See all articles by Sanchari Das

Sanchari Das

University of Denver

Bingxing Wang

Indiana University Bloomington

L. Jean Camp

Indiana University Bloomington - School of Informatics and Computing

Date Written: July 15, 2019

Abstract

Traditional single-factor authentication possesses several critical security vulnerabilities due to single-point failure feature. Multi-factor authentication (MFA), intends to enhance security by providing additional verification steps. However, in practical deployment, users often experience dissatisfaction while using MFA, which leads to non-adoption. In order to understand the current design and usability issues with MFA, we analyze aggregated user generated comments (N = 12,500) about application-based MFA tools from major distributors, such as, Amazon, Google Play, Apple App Store, and others. While some users acknowledge the security benefits of MFA, majority of them still faced problems with initial configuration, system design understanding, limited device compatibility, and risk trade-offs leading to non-adoption of MFA. Based on these results, we provide actionable recommendations in technological design, initial training, and risk communication to improve the adoption and user experience of MFA.

Keywords: Multi Factor Authentication, Sentiment Analysis, User Perception

Suggested Citation

Das, Sanchari and Wang, Bingxing and Camp, L. Jean, MFA is a Waste of Time! Understanding Negative Connotation Towards MFA Applications via User Generated Content (July 15, 2019). In Proceedings of the Thriteenth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2019), Available at SSRN: https://ssrn.com/abstract=3438209

Sanchari Das (Contact Author)

University of Denver ( email )

2201 S. Gaylord St
Denver, CO 80208-2685
United States

Bingxing Wang

Indiana University Bloomington ( email )

Dept of Biology
100 South Indiana Ave.
Bloomington, IN 47405
United States

L. Jean Camp

Indiana University Bloomington - School of Informatics and Computing ( email )

901 E 10th St
Bloomington, IN 47401
United States

Do you have negative results from your research you’d like to share?

Paper statistics

Downloads
202
Abstract Views
1,103
Rank
272,294
PlumX Metrics