Usable Security – Password Fallback

AuthenticationCOMP6620 – User Interface Design

Shaneé DawkinsRobert Voitle

Project Background

Password Fallback Authentication› Resource resorted to when users forget

their passwords Existing Tools

› CAPTCHA› Pre-defined questions› User-defined questions› Preference based authentication

Project Overview

Preference-based Method› User chosen images

How it works› User selects 8 preferences during account

set up (likes & dislikes)› User is presented with preferences if

password forgotten› User must make selections› No obscure question answers to memorize

Account Set Up

Forgot Password

Evaluation Usability Study

› Memorability (2 phase study)› Learnability (ease of use)› Safety (security)› Efficiency (time to select preferences)› Effectiveness (completion)› Utility (real world application)

Heuristics› Color blind› Security?