Graphical Passwords: Behind the Attainment of Goals

Users who enter their credentials in a public location risk having their passwords stolen by intruders. An attacker can steal a password by watching the individual's authentication session or recording it. Shoulder-surfing is a well-known risk, and it's especially dangerous while authenticating in public. Until recently, the user's awareness was the sole barrier against shoulder-surfing. Shoulder surfing resistant password authentication ensures that the user's authentication is not compromised by shoulder surfing. Because the user is never required to click directly on password symbols, it allows users to authenticate by inputting their password in a graphical manner in vulnerable areas. This mechanism's usability testing revealed that inexperienced users were able to correctly input and remember their graphical password.