Pick Me Up and I Will Tell You Who You Are: Analyzing Pick-Up Motions to Authenticate Users. - Maximilian Häring; Delphine Reinhardt; Yvonne Omlor (PerCom Workshops, 2018)

A Usability Evaluation of Let's Encrypt and Certbot: Usable Security Done Right. - Christian Tiefenau; Emanuel von Zezschwitz; Maximilian Häring; Katharina Krombholz; Matthew Smith 001 (CCS, 2019)

"Please enter your PIN" - On the Risk of Bypass Attacks on Biometric Authentication on Mobile Devices. - Christian Tiefenau; Maximilian Häring; Mohamed Khamis; Emanuel von Zezschwitz (CoRR, 2019)

Making Privacy Graspable: Can we Nudge Users to use Privacy Enhancing Techniques? - Christian Tiefenau; Maximilian Häring; Eva Gerlitz; Emanuel von Zezschwitz (CoRR, 2019)

Security, Availability, and Multiple Information Sources: Exploring Update Behavior of System Administrators. - Christian Tiefenau; Maximilian Häring; Katharina Krombholz; Emanuel von Zezschwitz (SOUPS @ USENIX Security Symposium, 2020)

Replication: Measuring User Perceptions in Smartphone Security and Privacy in Germany. - Maxim Schessler; Eva Gerlitz; Maximilian Häring; Matthew Smith 001 (EuroUSEC, 2021)

Please do not use !?_ or your License Plate Number: Analyzing Password Policies in German Companies. - Eva Gerlitz; Maximilian Häring; Matthew Smith 001 (SOUPS @ USENIX Security Symposium, 2021)

Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany. - Maximilian Häring; Eva Gerlitz; Christian Tiefenau; Matthew Smith 001; Dominik Wermke; Sascha Fahl; Yasemin Acar (SOUPS @ USENIX Security Symposium, 2021)

Less About Privacy: Revisiting a Survey about the German COVID-19 Contact Tracing App. - Maximilian Häring; Eva Gerlitz; Matthew Smith 001; Christian Tiefenau (CHI, 2023)

Evolution of Password Expiry in Companies: Measuring the Adoption of Recommendations by the German Federal Office for Information Security. - Eva Gerlitz; Maximilian Häring; Matthew Smith 001; Christian Tiefenau (SOUPS, 2023)

Adventures in Recovery Land: Testing the Account Recovery of Popular Websites When the Second Factor is Lost. - Eva Gerlitz; Maximilian Häring; Charlotte Theresa Mädler; Matthew Smith 001; Christian Tiefenau (SOUPS, 2023)

Attitudes towards Client-Side Scanning for CSAM, Terrorism, Drug Trafficking, Drug Use and Tax Evasion in Germany. - Lisa Geierhaas; Fabian Otto; Maximilian Häring; Matthew Smith 001 (SP, 2023)

Can Johnny be a whistleblower? A qualitative user study of a social authentication Signal extension in an adversarial scenario. - Maximilian Häring; Julia Angelika Grohs; Eva Tiefenau; Matthew Smith 001; Christian Tiefenau (SOUPS @ USENIX Security Symposium, 2024)

"They are responsible for ensuring that I can continue to use the service." Investigating Users' Expectations Towards 2FA Recovery in Germany. - Eva Tiefenau; Julia Angelika Grohs; Maximilian Häring; Matthew Smith 001; Christian Tiefenau (CHI, 2025)

I Have Not Understood but Agree: Studying Informed Consent in the Context of the German COVID-19 Contact Tracing App. - Maximilian Häring; Eva Tiefenau; Christian Tiefenau; Felix Kretschmer-Pietralla; Alina Stöver; Nina Gerber (ACM Trans. Comput. Hum. Interact., 2025)