Better, Funner, Stronger: A Gameful Approach to Nudge People into Making Less Predictable Graphical Password Choices

Raptis, George; Katsini, Christina; Cen, Andrew Jian-lan; Arachchilage, Nalin Asanka Gamagedara; Nacke, Lennart E.

doi:10.1145/3411764.3445658

Cited by 21 publications

(3 citation statements)

References 79 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Some other recent works have also been performed in the context of the graphical user authentication side. The authors in [ 23 ] have proposed a gamified version of the graphical password, GamePass, that is tested to be less predictable and effective for nudging users. They have left open directions to evaluate the GamePass techniques with other graphical user authentication techniques and incorporate aspects such as memorability and security to validate their findings further.…”

Section: Related Workmentioning

confidence: 99%

GRA-PIN: A Graphical and PIN-Based Hybrid Authentication Approach for Smart Devices

Kausar

Din

Khan

et al. 2022

Sensors

View full text Add to dashboard Cite

In many smart devices and numerous digital applications, authentication mechanisms are widely used to validate the legitimacy of users’ identification. As a result of the increased use of mobile devices, most people tend to save sensitive and secret information over such devices. Personal Identification Number (PIN)-based and alphanumeric passwords are simple to remember, but at the same time, they are vulnerable to hackers. Being difficult to guess and more user-friendly, graphical passwords have grown in popularity as an alternative to all such textual passwords. This paper describes an innovative, hybrid, and much more robust user authentication approach, named GRA-PIN (GRAphical and PIN-based), which combines the merits of both graphical and pin-based techniques. The feature of simple arithmetic operations (addition and subtraction) is incorporated in the proposed scheme, through which random passwords are generated for each login attempt. In the study, we have conducted a comparative study between the GRA-PIN scheme with existing PIN-based and pattern-based (swipe-based) authentications approaches using the standard Software Usability Scale (SUS). The usability score of GRA-PIN was analyzed to be as high as 94%, indicating that it is more reliable and user friendly. Furthermore, the security of the proposed scheme was challenged through an experiment wherein three different attackers, having a complete understanding of the proposed scheme, attempted to crack the technique via shoulder surfing, guessing, and camera attack, but they were unsuccessful.

show abstract

Section: Related Workmentioning

confidence: 99%

GRA-PIN: A Graphical and PIN-Based Hybrid Authentication Approach for Smart Devices

Kausar

Din

Khan

et al. 2022

Sensors

View full text Add to dashboard Cite

show abstract

“…A user study for Android pattern lock screen found that graphical passwords’ usability outweighs their security, due to, for example, susceptibility to shoulder surfing attacks (Andriotis et al , 2016). Nevertheless, recent security improvements have been achieved with gamified approaches (Raptis et al , 2021).…”

Section: Related Work Reviewmentioning

confidence: 99%

User perceptions and use of authentication methods: insights from youth in Mexico and Bosnia and Herzegovina

Hadžidedić

Fajardo-Flores

Ramić-Brkić

2022

ICS

View full text Add to dashboard Cite

Purpose This paper aims to address the user perspective about usability, security and use of five authentication schemes (text and graphical passwords, biometrics and hardware tokens) from a population not covered previously in the literature. Additionally, this paper explores the criteria users apply in creating their text passwords. Design/methodology/approach An online survey study was performed in spring 2019 with university students in Mexico and Bosnia and Herzegovina. A total of 197 responses were collected. Findings Fingerprint-based authentication was most frequently perceived as usable and secure. However, text passwords were the predominantly used method for unlocking computer devices. The participants preferred to apply personal criteria for creating text passwords, which, interestingly, coincided with the general password guidelines, e.g. length, combining letters and special characters. Originality/value Research on young adults’ perceptions of different authentication methods is driven by the increasing frequency and sophistication of security breaches, as well as their significant consequences. This study provided insight into the commonly used authentication methods among youth from two geographic locations, which have not been accounted for previously.

show abstract

“…The evidence shows a strong need to implement the password checker; it should not be optional. Other hotspot mitigation strategies such as users' sociocultural experiences (Constantinides et al, 2021) and gamification of the password creation process (Raptis et al, 2021) have also been explored in the context of graphical passwords. Future studies should investigate whether and to what extent such findings can be applied to GCPS and other game-based password systems.…”

Section: Hotspot Susceptibilitymentioning

confidence: 99%

Layered Battleship Game Changer Password System

Brumen,

Crepulja,

Bošnjak

2022

Informatica

View full text Add to dashboard Cite

The paper presents a secure and usable variant of the Game Changer Password System, first proposed by McLennan, Manning, and Tuft. Unlike the initial proposal based on inadequately secure Monopoly and Chess, we propose an improved version based on a layered “Battleship” game resilient against brute force and dictionary attacks. Since the initially proposed scheme did not check for the memorability and usability of a layered version, we conducted an experiment on the usability and memorability aspects. Surprisingly, layered passwords are just as memorable as single ones and, with an 80% recall rate, comparable to other graphical password systems. The claim that memorability is the most vital aspect of game-based password systems cannot be disproved. However, the experiment revealed that the usability decreased to such a low level that users felt less inclined to use such a system daily or recommend it to others. Our study has once again shown that optimizing the password security–memorability–usability triangle is hard to achieve without compromising one of its cornerstones. However, the layered Game Changer Password System can be used in specific applications where usability is of secondary importance, while security and memorability augmented by its graphical interface are at the forefront.

show abstract

Better, Funner, Stronger: A Gameful Approach to Nudge People into Making Less Predictable Graphical Password Choices

Cited by 21 publications

References 79 publications

GRA-PIN: A Graphical and PIN-Based Hybrid Authentication Approach for Smart Devices

GRA-PIN: A Graphical and PIN-Based Hybrid Authentication Approach for Smart Devices

User perceptions and use of authentication methods: insights from youth in Mexico and Bosnia and Herzegovina

Layered Battleship Game Changer Password System

Contact Info

Product

Resources

About