Analyzing 4 Million Real-World Personal Knowledge Questions (Short Paper). - Maximilian Golla; Markus Dürmuth (PASSWORDS, 2015)

On the Security of Cracking-Resistant Password Vaults. - Maximilian Golla; Benedict Beuscher; Markus Dürmuth (CCS, 2016)

Towards Implicit Visual Memory-Based Authentication. - Claude Castelluccia; Markus Dürmuth; Maximilian Golla; Fatma Deniz (NDSS, 2017)

"I want my money back!" Limiting Online Password-Guessing Financially. - Maximilian Golla; Daniel V. Bailey; Markus Dürmuth (SOUPS, 2017)

On the Accuracy of Password Strength Meters. - Maximilian Golla; Markus Dürmuth (CCS, 2018)

"What was that site doing with my Facebook password?": Designing Password-Reuse Notifications. - Maximilian Golla; Miranda Wei; Juliette Hainline; Lydia Filipe; Markus Dürmuth; Elissa M. Redmiles; Blase Ur (CCS, 2018)

Rethinking Access Control and Authentication for the Home Internet of Things (IoT). - Weijia He; Maximilian Golla; Roshni Padhi; Jordan Ofek; Markus Dürmuth; Earlence Fernandes; Blase Ur (USENIX Security Symposium, 2018)

Reasoning Analytically about Password-Cracking Software. - Enze Liu 001; Amanda Nakanishi; Maximilian Golla; David Cash; Blase Ur (IEEE Symposium on Security and Privacy, 2019)

This PIN Can Be Easily Guessed: Analyzing the Security of Smartphone Unlock PINs. - Philipp Markert; Daniel V. Bailey; Maximilian Golla; Markus Dürmuth; Adam J. Aviv (SP, 2020)

This PIN Can Be Easily Guessed. - Philipp Markert; Daniel V. Bailey; Maximilian Golla; Markus Dürmuth; Adam J. Aviv (CoRR, 2020)

Unacceptable, where is my privacy? Exploring Accidental Triggers of Smart Speakers. - Lea Schönherr; Maximilian Golla; Thorsten Eisenhofer; Jan Wiele; Dorothea Kolossa; Thorsten Holz (CoRR, 2020)

On the usability and security of password-based user authentication. - Maximilian Golla (2020)

Are Privacy Dashboards Good for End Users? Evaluating User Perceptions and Reactions to Google's My Activity. - Florian M. Farke; David G. Balash; Maximilian Golla; Markus Dürmuth; Adam J. Aviv (USENIX Security Symposium, 2021)

Driving 2FA Adoption at Scale: Optimizing Two-Factor Authentication Notification Design Patterns. - Maximilian Golla; Grant Ho; Marika Lohmus; Monica Pulluri; Elissa M. Redmiles (USENIX Security Symposium, 2021)

"It's Stored, Hopefully, on an Encrypted Server": Mitigating Users' Misconceptions About FIDO2 Biometric WebAuthn. - Leona Lassak; Annika Hildebrandt; Maximilian Golla; Blase Ur (USENIX Security Symposium, 2021)

Are Privacy Dashboards Good for End Users? Evaluating User Perceptions and Reactions to Google's My Activity (Extended Version). - Florian M. Farke; David G. Balash; Maximilian Golla; Markus Dürmuth; Adam J. Aviv (CoRR, 2021)

Towards Quantum Large-Scale Password Guessing on Real-World Distributions. - Markus Dürmuth; Maximilian Golla; Philipp Markert; Alexander May 001; Lars Schlieper (IACR Cryptol. ePrint Arch., 2021)

On the Security of Smartphone Unlock PINs. - Philipp Markert; Daniel V. Bailey; Maximilian Golla; Markus Dürmuth; Adam J. Aviv (ACM Trans. Priv. Secur., 2021)

"As soon as it's a risk, I want to require MFA": How Administrators Configure Risk-based Authentication. - Philipp Markert; Theodor Schnitzler; Maximilian Golla; Markus Dürmuth (SOUPS @ USENIX Security Symposium, 2022)

"I Knew It Was Me": Understanding Users' Interaction with Login Notifications. - Philipp Markert; Leona Lassak; Maximilian Golla; Markus Dürmuth (CoRR, 2022)

Exploring accidental triggers of smart speakers. - Lea Schönherr; Maximilian Golla; Thorsten Eisenhofer; Jan Wiele; Dorothea Kolossa; Thorsten Holz (Comput. Speech Lang., 2022)

"We may share the number of diaper changes": A Privacy and Security Analysis of Mobile Child Care Applications. - Moritz Gruber; Christian Höfig; Maximilian Golla; Tobias Urban; Matteo Große-Kampmann (Proc. Priv. Enhancing Technol., 2022)

A Two-Decade Retrospective Analysis of a University's Vulnerability to Attacks Exploiting Reused Passwords. - Alexandra Nisenoff; Maximilian Golla; Miranda Wei; Juliette Hainline; Hayley Szymanek; Annika Braun; Annika Hildebrandt; Blair Christensen; David Langenberg; Blase Ur (USENIX Security Symposium, 2023)

A Comparative Long-Term Study of Fallback Authentication Schemes. - Leona Lassak; Philipp Markert; Maximilian Golla; Elizabeth Stobert; Markus Dürmuth (CHI, 2024)

Understanding Users' Interaction with Login Notifications. - Philipp Markert; Leona Lassak; Maximilian Golla; Markus Dürmuth (CHI, 2024)

Why Aren't We Using Passkeys? Obstacles Companies Face Deploying FIDO2 Passwordless Authentication. - Leona Lassak; Elleen Pan; Blase Ur; Maximilian Golla (USENIX Security Symposium, 2024)

How Does Connecting Online Activities to Advertising Inferences Impact Privacy Perceptions? - Florian M. Farke; David G. Balash; Maximilian Golla; Adam J. Aviv (Proc. Priv. Enhancing Technol., 2024)