Password Strength Analysis and User Awareness Study- Evidence from Marathwada Region

Abstract

Passwords continue to serve as the most prevalent authentication mechanism across digital platforms, despite the emergence of advanced alternatives such as biometrics, token based systems, and multi factor authentication. Weak password practices, including the use of short, predictable strings and the reuse of credentials across multiple accounts, remain a major vulnerability in cybersecurity. This study investigates password strength and user awareness in the Marathwada region of Maharashtra, India, where digital adoption is rapidly increasing but cybersecurity literacy remains uneven. A mixed method approach was employed, combining survey data from 500 respondents with entropy based password strength evaluation using National Institute of Standards and Technology (NIST) guidelines. The results reveal that 42% of users employ weak passwords with entropy values below 28 bits, 36% fall into the moderate category, and only 22% demonstrate strong password practices. Furthermore, 54% of respondents admitted to reusing passwords across multiple platforms, while 39% incorporated personal identifiers such as names or birthdates, making them highly susceptible to dictionary and social engineering attacks. Although 68% of participants acknowledged the importance of strong passwords, only 18% reported enabling two factor authentication, highlighting a gap between awareness and practice.

The findings highlight a paradox: users are aware of password security principles but fail to implement them consistently, often prioritizing convenience over protection. This behavioral gap is particularly pronounced among rural populations, where reliance on simple numeric passwords is common. The study recommends localized awareness campaigns in regional languages, institutional enforcement of strong password creation policies, and the promotion of password managers and two factor authentication. These interventions are very important to strengthen cybersecurity resilience in Marathwada and serve as a model for similar semi urban and rural contexts across India.