Tuesday, 10 February 2026
Significant progress has been made in helping people protect their devices and information through more user-friendly methods like biometrics and Passkeys, according to new research.
However, the majority of systems being used by technologies companies place an undue burden on users to understand different and difficult security rules, while people also are not given enough choice about which solution best fits their individual requirements.
The research, published in the journal Computers & Security, was written by experts from the University of Nottingham and University of Plymouth and who have been studying and monitoring password practices for more than 20 years.
They say the demand for secure and usable authentication methods has never been greater, with people owning increasing numbers of devices that – in a large number of cases – store all of their most important personal data.
But as things stand, people are required to engage with a range of authentication methods – including passwords, PINs, tokens, and biometrics – multiple times a day, across different devices and services.
This fragmented approach, the researchers say, not only increases cognitive load but also raises barriers for those with physical, cognitive, or contextual limitations with usability and security often treated as competing objectives rather than coexisting goals.
Professor Nathan Clarke, Professor in Cyber Security and Digital Forensics at the University of Plymouth, said: “Technology is now fundamental to every aspect of our daily lives. Each of us may need to authenticate something at least 100 times a day, whether that’s accessing our mobile phones, our computer devices or apps and software within them. What we now need is to reach a point where security measures become more technically complex, so our information is secure – but, from a user perspective, those measures need to be easier to understand and use. And we as users need to be given choices about what we want to do, rather than it being forced upon us.”
The researchers involved in the study have previously highlighted how major tech companies were failing to support users with advice on how to securely protect their data, and that basic password guidance can dramatically improve account security.
For their new article, they wanted to explore how authentication has evolved, to identify the key issues and challenges that remain, and to consider whether solutions are being proposed that can resolve the usability and security trade-off.
Based on their findings, the researchers believe designers and service providers need to give better consideration to who their users are, what they’re trying to do, and what level of assurance is appropriate for them at any particular time and context.
They have also called on technology providers to steer away from one-size-fits-all models, instead suggesting they should unite behind more inclusive, consistent, and user-centred approaches, with the goal being to create authentication systems that are secure by design and usable by all.
Without such a shift, they add, there is a risk of perpetuating systems that are secure in theory but flawed in practice and that undermine user trust and system integrity.
The easier we make it for security to be used, without adding unnecessary friction, the greater the chances of it feeling acceptable and tolerable for users. If we authenticate over 100 times a day, then we don’t want this to seem like over 100 interruptions and delays. We want protection to be the natural default position, and offering users flexible and usable solutions is a clear step towards achieving this
Story credits
More information is available from Professor Steven Furnell on Steven.Furnell@nottingham.ac.uk or Jane Icke, Media Relations Manager for the Faculty of Science at the University of Nottingham, on jane.icke@nottingham.ac.uk
Notes to editors:
About the University of Nottingham
Ranked 97 in the world and 17th in the UK by the QS World University Rankings, the University of Nottingham is a founding member of Russell Group of research-intensive universities. Studying at the University of Nottingham is a life-changing experience, and we pride ourselves on unlocking the potential of our students. We have a pioneering spirit, expressed in the vision of our founder Sir Jesse Boot, which has seen us lead the way in establishing campuses in China and Malaysia - part of a globally connected network of education, research and industrial engagement.
Nottingham was crowned Sports University of the Year by The Times and Sunday Times Good University Guide 2024 – the third time it has been given the honour since 2018 – and by the Daily Mail University Guide 2024.
The university is among the best universities in the UK for the strength of our research, positioned seventh for research power in the UK according to REF 2021. The birthplace of discoveries such as MRI and ibuprofen, our innovations transform lives and tackle global problems such as sustainable food supplies, ending modern slavery, developing greener transport, and reducing reliance on fossil fuels.
The university is a major employer and industry partner - locally and globally - and our graduates are the third most targeted by the UK's top employers, according to The Graduate Market in 2024 report by High Fliers Research. Alongside Nottingham Trent University, we lead the Universities for Nottingham initiative, a pioneering collaboration between the city’s two world-class institutions to improve levels of prosperity, opportunity, sustainability, health and wellbeing for residents in the city and region we are proud to call home. More news…