# Password Managers--It's All about Trust and Transparency
## 4 Results
### Usability Test and Interview Study
#### 4.2.2 Results of the Interview Study
Nine participants said that stored passwords are encrypted while another user guessed that passwords should be encrypted and saved in distributed places (separately); for example, if we save five passwords, then three passwords will be saved in one place while the other two passwords will be stored in another place. Some of the participants who did not know the process stated that they could not see the process from the other side as well as they did not know what password managers do with passwords. Additionally, we asked the participants if they would trust the browser extension to fill in passwords on their behalf, nine non-users and two users did not trust the browser extension to fill in passwords, so we can see that more non-users do not trust the extension to fill in passwords. A few participants who answered \"No\" said they would not trust the browser extension with financial accounts and would not use it for all websites. Likewise, other participants stated that they would not trust it because somebody else might use the browser and they would not trust the computer. Surprisingly, only five users of password managers out of 16 would trust the vendor to store all passwords while 11 users and all 14 non-users would not trust it. This answer indicates that the majority of participants would not trust password managers with all their passwords. As a result, we asked our participants for a specific reason for not trusting the vendor. Many participants said that they did not store bank passwords in a password manager, while one participant said they did not want to depend heavily on a vendor. Another comment from participants who did not trust it was \begin{table}
\begin{tabular}{l l l} \hline \hline
**Questions** & **16 Users** & **14 Non Users** \\ \hline Do you know where a password manager store passwords? & Yes: 9—No: 7 & Yes: 5—No: 9 \\ \hline Do you understand how a password manager process passwords? & Yes: 6—No: 10 & Yes: 3—No: 11 \\ \hline Would you trust the browser extension of a password manager to fill in passwords? & Yes: 14—No: 2 & Yes: 5—No: 9 \\ \hline Would you trust the vendor of a password manager to store all passwords? & Yes: 5—No: 11 & Yes: 0—No: 14 \\ \hline Would you trust a password manager to delete password permanently from its database after you deleted it from vault? & Yes: 5—No: 11 & Yes: 0—No: 14 \\ \hline Would you trust a password manager to retrieve account all time? & Yes: 15—No: 1 & Yes: 12—No: 2 \\ \hline Do you know that a password manager synchronize passwords across devices using its own service? & Yes: 16—No: 0 & Yes: 12—No: 2 \\ \hline Would you let a password manager store bank detail and passport information? & Yes: 3—No: 13 & Yes: 0—No: 14 \\ \hline Would you install a browser extension of a password manager on a shared computer to access passwords? & Yes: 1—No: 15 & Yes: 1—No: 13 \\ \hline Have you ever used a random password generator? & Yes: 3—No: 13 & Yes: 2—No: 12 \\ \hline Do you know that chrome and firefox offer built-in password generator? & Yes: 5—No: 11 & Yes: 0—No: 14 \\ \hline \hline \end{tabular}
\end{table} 
Table 12: Answers by 16 users and 14 non-users for (Yes/No) questions about password managers and the similarities between the two groups. \"I do not know how they store it\" and \"I cannot trust them because they might access my accounts\". On the other hand, there were user participants who trusted the vendor and said there was no other choice but to use it, while another said the vendor had a strong policy to store passwords. Also, one user participant said they would trust Chrome and LogMeIn because they are big companies, but one participant stated they would trust the vendor with some passwords but not with banking passwords. So, it can be seen that most of the comments are related to trust and security concerns (Table 13). We asked the users of a password manager if they store all passwords in it, 14 users out of 16 said they do not store all passwords.