Easy-Auth: Graphical Password Authentication using a Randomization Method

Graphical authentication methods have established themselves as a viable alternative to more established methods of authentication. The analysis of existing graphical authentication systems reveals that several of them compromise security by simplifying the method, making it possible to execute a variety of attacks such as hidden camera, guessing, shoulder surfing, and smudge. Additionally, some of them make performance sacrifices for security. Nonetheless, this article proposes a new graphical password method, Easy-Auth, that is immune to the aforementioned attacks. Easy-Auth dynamically repositions the images and limits the number of login attempts, thereby increasing its security. Easy-Auth is evaluated in terms of security by comparing with its counterparts.