Un estudio de usabilidad de la autenticación basada en passkeys

Erick Arnie Zavaleta Galarza; Alexander Josué Venturo Ramos; Cristhian André Jondec Delgado; Alberto Carlos Mendoza de los Santos

doi:10.37431/conectividad.v7i2.429

Autores/as

Erick Arnie Zavaleta Galarza National University of Trujillo https://orcid.org/0009-0002-5880-3626
Alexander Josué Venturo Ramos National University of Trujillo https://orcid.org/0009-0003-4203-134X
Cristhian André Jondec Delgado National University of Trujillo https://orcid.org/0009-0004-9566-9301
Alberto Carlos Mendoza de los Santos National University of Trujillo https://orcid.org/0000-0002-0469-915X

DOI:

https://doi.org/10.37431/conectividad.v7i2.429

Palabras clave:

Autenticación sin contraseña, Contraseñas, Experiencia de usuario, Ciberseguridad, System usability scale

Resumen

Las contraseñas tradicionales presentan limitaciones críticas en usabilidad y seguridad, con tasas de reutilización superiores al 60% y elevada fatiga cognitiva en usuarios. Los passkeys, implementados bajo estándares FIDO2/WebAuthn, emergen como alternativa passwordless basada en criptografía de clave pública. Evaluar comparativamente la usabilidad y satisfacción percibida entre passkeys y contraseñas tradicionales mediante evidencia cuantitativa en contexto universitario latinoamericano. Estudio experimental controlado con diseño between-subjects (n=30 participantes universitarios, edad media=21.4 años) asignados aleatoriamente a dos grupos durante una semana de pruebas. Se aplicó el System Usability Scale (SUS), cuestionario demográfico y preguntas de satisfacción tipo Likert. El análisis incluyó pruebas no paramétricas (Mann-Whitney U) y correlaciones de Spearman. Los passkeys obtuvieron puntuación SUS media de 83.2 (DE=5.04), significativamente superior a contraseñas tradicionales (71.8, DE=2.2). La satisfacción general y facilidad de uso fueron mayores para passkeys (8.53 y 8.86 respectivamente) versus contraseñas (7.73 y 7.46). Las correlaciones entre satisfacción-SUS (ρ=0.41) y facilidad-SUS (ρ=0.35) resultaron moderadas-débiles. Los passkeys demuestran ventajas significativas en usabilidad y aceptación, constituyendo una alternativa viable para reemplazar contraseñas en aplicaciones comerciales, particularmente entre población joven con experiencia tecnológica moderada.

Citas

Abdrabou, Y., Abdelrahman, Y., Khamis, M., & Alt, F. (2021). Think Harder! Investigating the Effect of Password Strength on Cognitive Load during Password Creation. Proceedings of the CHI Conference on Human Factors in Computing Systems. https://doi.org/10.1145/3411763.3451636

Arias Cabarcos, P. & Meyer, P. (2025). ‘The more accounts I use, the less I have to think’: A Longitudinal Study on the Usability of Password Managers for Novice Users. USENIX Proceedings of the Twenty-First Symposium on Usable Privacy and Security. August 11–12, 2025 • Seattle, WA, USA. https://www.usenix.org/conference/soups2025/presentation/cabarcos

Ashish, N., Jeong, J. J., Shah, S. W. A., Nosouhi, M., & Doss, R. (2024). Examining usable security features and user perceptions of Physical Authentication Devices. Comput. Secur., 139(C). https://doi.org/10.1016/j.cose.2023.103664

Brooke, J. (1996). SUS: A “quick and dirty” usability scale. In P. W. Jordan, B. Thomas, B. A. Weerdmeester, & I. L. McClelland (Eds.), Usability Evaluation in Industry (pp. 189–194). London: Taylor & Francis.

Feinberg, S., & Murphy, M. (2000). Applying cognitive load theory to the design of Web-based instruction. IPCC/SIGDOC ’00: Proceedings of IEEE Professional Communication Society International Professional Communication Conference and Proceedings of the 18th Annual ACM International Conference on Computer Documentation: Technology & Teamwork, 353–360. https://doi.org/10.1109/IPCC.2000.887293

FIDO Alliance. (2023). Passkeys: Passwordless Authentication. https://fidoalliance.org/specifications/

Grawemeyer, B., & Johnson, H. (2011). Using and managing multiple passwords: A week to a view. Interacting with Computers, 23(3), 256–267. https://doi.org/10.1016/j.intcom.2011.03.007

Kennesaw State University (2025). An Investigation on Users' In-category Password Reuse Behavior. Coles College of Business Working Paper Series, 5. https://campus.kennesaw.edu/colleges-departments/coles/research/docs/spring-2025/spring-2025-05.pdf

Lyastani, S. G., Schilling, M., Neumayr, M., Backes, M., & Bugiel, S. (2020). Is FIDO2 the Kingslayer of User Authentication? A Comparative Usability Study of FIDO2 Passwordless Authentication. 2020 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA, 2020, pp. 268-285, doi: 10.1109/SP40000.2020.00047. https://ieeexplore.ieee.org/document/9152694

Mujeye, S. (2016). An Experimental Study on the Role of Password Strength and Cognitive Load on Employee Productivity [Doctoral dissertation, Nova Southeastern University]. https://nsuworks.nova.edu/cgi/viewcontent.cgi?article=1962&context=gscis_etd

Owens, K., Anise, O., Krauss, A., & Ur, B. (2021). User Perceptions of the Usability and Security of Smartphones as FIDO2 Roaming Authenticators. Proceedings of the Seventeenth Symposium on Usable Privacy and Security. August 9–10, 2021, 57–76. https://www.usenix.org/conference/soups2021/presentation/owens

Reese, K., Smith, T., Dutson, J., Armknecht, J., Cameron, J., & Seamons, K. (2019). A Usability Study of Five Two-Factor Authentication Methods. USENIX Symposium on Usable Privacy and Security. Proceedings of the Fifteenth Symposium on Usable Privacy and Security. August 12–13, 2019, Santa Clara, CA, USA. https://www.usenix.org/conference/soups2019/presentation/reese

Ruoti, S., Andersen, J. M., Zappala, D., & Seamons, K. E. (2016). Why Johnny Still, Still Can’t Encrypt: Evaluating the Usability of a Modern PGP Client. USENIX Symposium on Usable Privacy and Security. https://doi.org/10.48550/arXiv.1510.08555

Sauro, J., & Lewis, J. R. (2016). Quantifying the User Experience: Practical Statistics for User Research (2nd ed). Morgan Kaufmann.

Suria, O. (2024). A Statistical Analysis of System Usability Scale (SUS) Evaluations in Online Learning Systems. Journal of Information Systems and Informatics, 6(2), 997–1004. https://doi.org/10.51519/journalisi.v6i2.750