NDSS 2025 – “Who Is Trying To Access My Account?”

This conference abstract presents a study of users’ perceptions and behaviors toward risk-based authentication (RBA) notifications, including those triggered by correct/incorrect passwords and password resets. Findings show strong user concern yet limited trust, frequent suspicion of phishing, and a tendency to log in to check activity without further action. The authors recommend more detailed contextual information, additional security measures, and clearer risk explanations in RBA notifications to better mitigate potential account compromise.