Contents

• The Problem
  • Many Authentication Systems
  • Managing Multiple Passwords
  • Poor Password Selection
  • Failing Stupid
    • Case Study: Paris Hilton Screwed by Dog
  
  
• Existing Approaches
  • Write Down Passwords
  • Mnemonic Passwords
  • More Secure Mnemonic Passwords
  • Pass Phrases
  
  
• Mnemonic Password Formulas
  • Definition
  • Properties
  • Formula Design
    • Syntax
    • A Simple MPF
    • A More Complex MPF
    • Design Goals
    • Layered Mnemonics
    • Advanced Elements
  • Enterprise Considerations
  • Weaknesses
    • The ``Skeleton Key'' Effect
    • Complexity Through Password Policy
  
  
• Conclusion
• Bibliography