Password Change Statistics

The reports in this directory get generated on the 8th of each month.

Secret question counts

    20 people with 0 questions.
    80 people with 1 question.
   645 people with 2 questions.
 46922 people with 3 questions.
  4478 people with 4 questions.
  1193 people with 5 questions.
  1165 people with 6 questions.
  3399 people with 7 questions.
   336 people with 8 questions.
    17 people with 9 questions.
     8 people with 10 questions.
     2 people with 12 questions.
 -----
 57520 people with 3+ questions.
This section lists the number of people who had the indicated number of questions. People with fewer than 3 questions cannot use their secret questions to reset their password. People listed as having zero questions are the ones who had questions last month but not this month.

Reminders

  2767 people are ripe to be reminded to test questions.
After giving them time to forget the answers to their questions, a reminder is sent asking people to test their questions to see whether they can really answer them. The time period was originally 6 months after the questions were established or last changed. It was changed to 2 months in April of 2004.

Custom Questions

 32633 people with 0 custom questions.
 28733 people with 1 custom question.
  1347 people with 2 custom questions.
   149 people with 3 custom questions.
    13 people with 4 custom questions.
     1 person with 5 custom questions.
     2 people with 6 custom questions.
The custom questions section lists the number of people who set up their own custom secret questions.

New User Counts

   New users (source 1, hepps):
    21 people with 0 questions.
     2 people with 2 questions.
   221 people with 3 questions.
    12 people with 4 questions.
     1 person with 5 questions.
     1 person with 6 questions.
     2 people with 7 questions.

   New users (source 2, students):
    81 people with 0 questions.
     1 person with 1 question.
    50 people with 2 questions.
  3346 people with 3 questions.
   279 people with 4 questions.
    69 people with 5 questions.
    48 people with 6 questions.
   110 people with 7 questions.
     2 people with 8 questions.
     1 person with 9 questions.

   New users (source 7, advance):
     3 people with 0 questions.
     1 person with 2 questions.
   121 people with 3 questions.
     5 people with 4 questions.
     1 person with 5 questions.
     1 person with 6 questions.
     2 people with 7 questions.
The new user counts is a tally of the number secret questions that were established with the new NetIDs that were created that month.

Password Changes

   Password changes:
	With PW:	  3144   ( 57%)
	Reset:		  2389   ( 43%)  (100%)

	By root:	  1055   ( 19%)  ( 44%)
	W/O  PW:	  1334   ( 24%)  ( 56%)  (100%)

	With PAC:	   527   ( 10%)  ( 22%)  ( 40%)
	With QnA:	   807   ( 15%)  ( 34%)  ( 60%)  (100%)

	With 3 Q:	   723   ( 13%)  ( 30%)  ( 54%)  ( 90%)
	With 4 Q:	    57   (  1%)  (  2%)  (  4%)  (  7%)
	With 5 Q:	    10   (  0%)  (  0%)  (  1%)  (  1%)
	With 6 Q:	     6   (  0%)  (  0%)  (  0%)  (  1%)
	With 7 Q:	    11   (  0%)  (  0%)  (  1%)  (  1%)
The password change stats indicate the methods used to change passwords throughout the month. First it's divided between those people who used their existing password for authentication (With PW) or via other means (Reset). Password-authenticated password changes would be via the Manage your NetID Resources web page, the user using the passwd utility on a unix host or other standard supported Kerberos methods. Reset passwords are either done via the Change a Forgotten Password web site (W/O PW) or by calling C&CI (By root).

The W/O PW password changes are then broken down further based on whether they were done with a PAC or secret questions. The secret question changes are then broken down by how many questions the user had established.

Failed Secret Question Resolution

   QnA Fail Resolution: < 1 hr   3 hr   8 hr  24 hr  36 hr   more
        With QnA:          776      1      1      3      4     14
        With PAC            15      0      2      8      2     11
        With PW:            25      0      1      1      0      7
        By Root:            31      5      1      8      0     14
        Never:             454
        Total:            1384
For the people who entered their secret questions incorrectly while trying to change their password, this section attempts to analyze what method they fell back to to get their password changed. In the above list, 776 of them successfully entered their answers within an hour. The "By Root" number indicates a call to C&CI. The number listed as "with PAC" prior to April 2004 must also have involved a call to C&CI as the questions would need to be cleared to use a PAC.

Secret Question Check

   QnA Check	    Okay      Bad    Short   No Ans
	3 Q:	     808     2146      157      395
	4 Q:	      60      273       16       76
	5 Q:	      13       48        6       33
	6 Q:	       6       38        8       22
	7 Q:	      12       65       13       21
The QnA Check table lists the number of attempts made to authenticate using the secret questions in order to change a password.

Secret Question Test

   QnA Test	     Try     Okay      Bad    Short   No Ans
	3 Q:	       1      404      298       33       43
	3 Q:	       2       63      207       13       11
	3 Q:	       3       25      113        3        0
	3 Q:	       4        6       58        0        1
	3 Q:	       5        2       38        0        0
	4 Q:	       1       21       35        1        9
	4 Q:	       2        3       25        2        2
	4 Q:	       3        4        7        0        0
	4 Q:	       4        0        8        0        0
	4 Q:	       5        0        4        0        0
	5 Q:	       1        8        8        2        4
	5 Q:	       2        1        5        0        2
	5 Q:	       3        1        1        0        1
	5 Q:	       4        0        1        0        0
	5 Q:	       5        0        1        0        0
	6 Q:	       1        4        5        0        5
	6 Q:	       2        0        2        0        0
	6 Q:	       3        0        1        0        0
	6 Q:	       4        0        1        0        0
	6 Q:	       5        0        1        0        0
	7 Q:	       1        4        3        1        4
	7 Q:	       2        1        3        0        3
	7 Q:	       3        0        1        0        1
The QnA Test section lists the number of people who went to the Test Your Secret Questions section of the Manage Your NetID Resources web tool. For the people with 3 questions above, 404 answered their questions properly on the first try. 63 more got them on the second try, etc. The No Ans column indicates that the validation failed because one or more of the questions were left unanswered. Short indicates one or more answer was fewer than the required 4 characters and Bad indicates that all the answers were filled in and were long enough, but one or more was the incorrect answer.
Ken Lowe
Email -- ken@cac.washington.edu
Web -- http://staff.washington.edu/krl/