Bu-Dash: a universal and dynamic graphical password scheme (extended version)

Abstract Passwordless authentication is a trending theme in cyber security, while biometrics gradually replace knowledge-based schemes. However, Personal Identification Numbers, passcodes, and graphical passwords are still considered as the primary means for authentication. Passwords must be memorable to usable; therefore, users tend choose easy guess secrets, compromising security. The Android Pattern Unlock popular password scheme that can easily attacked by exploiting human behavioristic traits. Despite its vulnerabilities, popularity of has led researchers propose adjustments variations enhance security but maintain familiar user interface. Nevertheless, prior work demonstrated improving preserving usability remains frequently hard task. In this paper we novel built on foundations well-accepted method, which usable, inclusive, universal, robust against shoulder surfing (basically) smudge attacks. Our scheme, named , features dynamic interface mutates every time swipes screen. pilot studies illustrate attracts positive acceptance rates, it secure, maintains high levels. We define complexity metrics used further diversify input, conduct assessments.