Pass-Roll and Pass-Scroll: New Graphical User Interfaces for Improving Text Passwords

Abstract

The user interface for inputting text-based passwords has been the same for past 40 years. Today, technology enables the development of intuitive, interactive and responsive interfaces that can help users in creating and remembering more secure passwords. In this paper, we exploit the power of modern-day technologies and develop two novel interfaces, (i) linear one called as Pass-Scroll and (ii) circular one called as Pass-Roll. These graphical interfaces allow users to perform rotation operation by choosing a new starting point for their passwords. Consequently, the security of a n length password can be potentially improved by log2(n) bits. To evaluate Pass-Roll and Pass-Scroll interfaces we conduct two user studies, one in the laboratory and the other on Crowd-Flower. Both studies show that users willingly take advantage of these interfaces and choose a new starting point to rotate their password. We find that users' choices are quite diverse and multiple cues associated with the interfaces help users to recall their starting point in just one attempt. Moreover, our interfaces require no server-side changes and can be easily implemented as browser extensions. Permission to freely reproduce all or part of this paper for noncommercial purposes is granted provided that copies bear this notice and the full citation on the first page. Reproduction for commercial purposes is strictly prohibited without the prior written consent of the Internet Society, the first-named author (for reproduction of an entire paper only), and the author's employer if the paper was prepared within the scope of employment.