User-friendly security for the moments people are most likely to get stuck.
MB Usable Security is a usable security research and product studio. We study and build tools for login, authentication, account access, and identity workflows.
Our goal is simple: Help organizations create security that people can actually use.
Selected Research Experience
Research contributing to work supported by NASA, AFRL, NSF, and NAVSEA.
What is usable security?
Usable security means user-friendly security. It means security that protects people without confusing them, locking them out, or pushing them into unsafe shortcuts.
When security is too hard, people find workarounds.
“Most of those workarounds are not signs of carelessness. They are signs that the system failed the user.”
User-friendly security reduces the need for dangerous workarounds.
Where security usually breaks down
Three areas where MB Usable Security researches, designs, and builds — always with the person on the other end of the screen in mind.
Where We Focus
Login & Authentication
Sign-in • Password reset • MFA • Recovery • Lockouts
Safer Access Patterns
Identity • Biometrics • Device trust • Adaptive auth – Human review
Reducing Workarounds
Password reuse • Written passwords
Credential sharing • Disabled protection • Confusion
Research-led security, built for real people
MB Usable Security is led by Paul McNeil, PhD, a computer and information systems engineer with nearly a decade of cybersecurity research experience. The studio works with trusted specialists and collaborators to turn rigorous research into clearer workflows, safer access patterns, and practical security products people can actually use.
The Lockline
A private 24/7 login concierge for professionals supporting older loved ones.
When an older loved one gets locked out or receives a suspicious account message, The Lockline gives them a trusted place to call before the issue becomes your emergency.
Calls are answered by real people located in the United States.
For serious login, verification, password-reset, and suspicious-message moments.
We never ask for your loved one’s passwords.
A calm, trusted place to turn when something feels off online.