I Can’t Type That! P@$$w0rd Entry on Mobile Devices

Abstract

Abstract. Given the numerous constraints of onscreen keyboards, such as smaller keys and lack of tactile feedback, remembering and typing long, complex passwords -an already burdensome task on desktop computing systems -becomes nearly unbearable on small mobile touchscreens. Complex passwords require numerous screen depth changes and are problematic both motorically and cognitively. Here we present baseline data on device-and agedependent differences in human performance with complex passwords, providing a valuable starting dataset to warn that simply porting password requirements from one platform to another (i.e., desktop to mobile) without considering device constraints may be unwise.

Usability and Security Considerations for Public Safety Mobile Authentication

“…On mobile devices, it is necessary to switch back and forth between different onscreen keyboards to type numbers and special characters often required in complex passwords [20]. Passwords are usually masked so users cannot see what they have typed.…”

"I don't like putting my face on the Internet!": An acceptance study of face biometrics as a CAPTCHA replacement

“…For NoBot in particular, we assessed the user experience of repeated use across either laptop or tablet. Examining use on a tablet is important as interactions and purchases become increasingly mobile, posing significant usability challenges such as entry of characters on a virtual keyboard [13,7].…”

Protecting Touch: Authenticated App-To-Server Channels for Mobile Devices Using NFC Tags

“…Yan et al [1]). Particularly on mobile devices, the limited input capabilities (e.g., small on-screen keyboards) often prevent users from choosing such a secure password (see the study by Greene et al [2]). Moreover, eavesdropping (e.g., through shoulder surfing or keyloggers), phishing, taking notes of passwords and even intentional sharing can pose a risk to systems protected by this security mechanism.…”

“…Greene et al [2]). Additionally, these users are more frequently exposed to the possibility of eavesdropping on the password through shoulder surfing, etc.…”