Paper Citation Record · LEDGER

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers

As of 22 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 0 inbound Pith citation observations for arXiv:1908.03296.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
1908.03296 v2

Coverage vector

measured 40 of 40 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-14T14:27:37.291825Z

measured 40 of 40 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-22T06:32:14.747728+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

40 of 40 outbound references displayed

verified exact1
verified fuzzy36
unresolved1
parse uncertain2
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 1c04bf42-8fd1-4918-a05e-b8d83c626651 · outbound

This paper cites Bellovin and M.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Bellovin and M

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.236749Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation c44ff502-00fe-4d42-9aa1-682eca618a11 · outbound

This paper cites Kamouﬂage: Loss-resistant password management.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Kamouﬂage: Loss-resistant password management

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.195303Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b98efb2a-dbd3-406e-b4ef-f9f75ca27717 · outbound

This paper cites The science of guessing: analyzing an anonymized corpus of 70 million passwords.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers The science of guessing: analyzing an anonymized corpus of 70 million passwords

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.178893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 82e1add5-6d44-4933-9a68-10e4f03fcb72 · outbound

This paper cites The quest to replace passwords: A framework for comparative evaluation of web authentication schemes.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers The quest to replace passwords: A framework for comparative evaluation of web authentication schemes

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.159639Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 4edeed5b-296a-40f5-a8b0-3bb4a49dc2f8 · outbound

This paper cites Operating system framed in case of mistaken identity: measuring the success of web-based spooﬁng attacks on os password-entry dialogs.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Operating system framed in case of mistaken identity: measuring the success of web-based spooﬁng attacks on os password-entry dialogs

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.138899Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation e66d5509-91b3-4924-9d84-43eeb6ded156 · outbound

This paper cites Cracking-resistant password vaults using natural language encoders.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Cracking-resistant password vaults using natural language encoders

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.117684Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 02e4fe7e-88b9-48aa-ada9-d7a042def168 · outbound

This paper cites A usability study and critique of two password managers.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers A usability study and critique of two password managers

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.095250Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 120f0762-3c8c-48fa-8978-2d143db3fd56 · outbound

This paper cites A cognitive-behavioral framework of user password management lifecycle.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers A cognitive-behavioral framework of user password management lifecycle

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.075042Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 3c9057c3-3215-4860-8e95-40dbe96a45b0 · outbound

This paper cites Linux password storage.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Linux password storage

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.047654Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation dd1c2ff5-9749-43b9-a2e3-a6dbe4be08a6 · outbound

This paper cites The best password managers of.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers The best password managers of

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.029306Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 8dead673-522b-4423-805a-8f6936df3ecd · outbound

This paper cites The tangled web of password reuse.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers The tangled web of password reuse

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.987348Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 4a011809-3cd1-4b59-81ec-c3589240ed47 · outbound

This paper cites Password strength: An empirical analysis.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Password strength: An empirical analysis

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.963981Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 9dce927e-1367-4eef-bed6-529b69d90ee1 · outbound

This paper cites Password managers: Under the hood of secrets management.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Password managers: Under the hood of secrets management

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.934982Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 8754e175-e56b-44cf-9190-f08816901bb2 · outbound

This paper cites An investigation into users’ considerations towards using password managers.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers An investigation into users’ considerations towards using password managers

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.889759Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation e4484687-b8f1-44b6-a361-a20591676d5e · outbound

This paper cites an unresolved cited work.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Unresolved cited work

Reference 15

Resolution: parse uncertain; raw_fallback, observed 2026-08-14T14:27:37.910620Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 551ae012-10ac-413e-80bb-f726f7f48cca · outbound

This paper cites An administrator’s guide to internet password research.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers An administrator’s guide to internet password research

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.851072Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 1ce254f9-a980-4f5e-842d-ee4812a65ee4 · outbound

This paper cites A large-scale study of web password habits.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers A large-scale study of web password habits

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.870341Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b3e2dd1a-a5cf-4cca-a0ed-5af211a79404 · outbound

This paper cites So long, and no thanks for the externalities: the rational rejection of security advice by users.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers So long, and no thanks for the externalities: the rational rejection of security advice by users

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.799576Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 51bc0b90-6fac-4ade-8bc4-7f76ebdaad98 · outbound

This paper cites On the security of password manager database formats.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers On the security of password manager database formats

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.829801Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 139e1969-a363-4e50-81e2-7d796f9c86b1 · outbound

This paper cites Better managed than memorized? studying the impact of managers on password strength and reuse.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Better managed than memorized? studying the impact of managers on password strength and reuse

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.747412Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 3fb41ad9-abda-4790-b0be-85445aa98afe · outbound

This paper cites The emperor’s new password manager: Security analysis of web-based password managers.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers The emperor’s new password manager: Security analysis of web-based password managers

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.771499Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 9bd7d53d-c731-4a64-a9ed-4df193ecf214 · outbound

This paper cites Fast, lean, and accurate: Modeling password guessability using neural networks.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Fast, lean, and accurate: Modeling password guessability using neural networks

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.688949Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 2b7df37d-28db-4c30-b3fd-b2dfdeaae81c · outbound

This paper cites The best password managers of.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers The best password managers of

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.725471Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 38d5cccb-437b-482a-95be-a2ce58e49899 · outbound

This paper cites Accessed: 2019-02- 22.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Accessed: 2019-02- 22

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.707071Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 4c186d76-5555-4cd3-9f97-326df497ea75 · outbound

This paper cites Let’s go in for a closer look: Observing passwords in their natural habitat.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Let’s go in for a closer look: Observing passwords in their natural habitat

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.601679Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 09f201a6-eec9-4b0a-9be4-14de3c4dbe45 · outbound

This paper cites The autocomplete attribute and login ﬁelds.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers The autocomplete attribute and login ﬁelds

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.661463Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation cb2ccde0-77be-4e86-b305-7e5420f68df9 · outbound

This paper cites an unresolved cited work.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Unresolved cited work

Reference 27

Resolution: parse uncertain; raw_fallback, observed 2026-08-14T14:27:37.639931Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 0a2e9724-4271-4fa7-9056-2d264b9f360c · outbound

This paper cites Tls proxies: Friend or foe? In Proceedings of the 2016 Internet Measurement Conference , pages 551–557.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Tls proxies: Friend or foe? In Proceedings of the 2016 Internet Measurement Conference , pages 551–557

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.622232Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 3bd8d0b6-0d24-4b9b-8fd3-7934b935ad67 · outbound

This paper cites Password managers: Attacks and defenses.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Password managers: Attacks and defenses

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.521802Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 92df7723-e561-467b-b91c-d35b77b1882b · outbound

This paper cites Password security: What users know and what they actually do.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Password security: What users know and what they actually do

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.577648Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 1fe57575-1b80-40a6-bcca-87e9919f82a3 · outbound

This paper cites End-to-end passwords.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers End-to-end passwords

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.556465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 563a89a2-05c7-4a29-a8e9-b1f93a0419d0 · outbound

This paper cites Statistics: Cybersecurity data breaches on the rise.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Statistics: Cybersecurity data breaches on the rise

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.539349Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 241b4948-2d6f-45e6-9524-c7a2a8a18b89 · outbound

This paper cites How to end password reuse on the web.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers How to end password reuse on the web

Reference 33

Resolution: verified exact; local_arxiv, observed 2026-08-14T14:27:37.355350Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation c821f731-1f59-45ed-9179-79e66bee6bd2 · outbound

This paper cites Password-manager friendly (pmf): Semantic annotations to improve the effectiveness of password managers.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Password-manager friendly (pmf): Semantic annotations to improve the effectiveness of password managers

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.499636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 361e0922-e07b-4561-abae-1c33d10e16d3 · outbound

This paper cites Protecting users against xss-based password manager abuse.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Protecting users against xss-based password manager abuse

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.479650Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation b2e2b782-d2be-46be-958d-1cbc02316950 · outbound

This paper cites an unresolved cited work.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Unresolved cited work

Reference 36

Resolution: unresolved; raw_fallback, observed 2026-08-14T14:27:37.459705Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 64d5f4c0-0db2-47da-9302-9df36024ede2 · outbound

This paper cites zxcvbn: Low-budget password strength estimation.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers zxcvbn: Low-budget password strength estimation

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.440557Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation c1f09d76-2506-439a-a97f-dba5f225c955 · outbound

This paper cites Wu et al.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Wu et al

Reference 39

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.402153Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 0caaab25-286b-442c-a916-65c597855afc · outbound

This paper cites args": { 3.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers args": { 3

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:37.381811Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Observation 7b94f608-3cb8-4647-8877-0a087455908b · outbound

This paper cites Accessed: 2019-02-22.

That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers Accessed: 2019-02-22

Reference 2019

Resolution: verified fuzzy; raw_fallback, observed 2026-08-14T14:27:38.010219Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.

Pith citing papers

No inbound Pith citation observations are available.