Аннотация:In this article, we analyze the perception of Saudi state application users about password selection from real-world data. A total of 1,082 participants provided information about their behavior on state applications. The study extracts useful information related to the users’ weak practices. The findings include useful information representing thousands of minds and individual behaviors in using state applications. As a contribution to the area, it is found that the state applications were developed properly regarding security practices. However, users still represent the weakest party, and they are not aware of the proper practices they should follow. Thus, extensive effort is required to be spent on user education. On the other hand, the diversity of state applications may represent an extra effort to users in the way that they have separate passwords for each application, which makes a unified login portal for all the state applications the appropriate solution.
