Institutional Research Information Service
UCL Logo
Please report any queries concerning the funding data grouped in the sections named "Externally Awarded" or "Internally Disbursed" (shown on the profile page) to your Research Finance Administrator. Your can find your Research Finance Administrator at https://www.ucl.ac.uk/finance/research/rs-contacts.php by entering your department
Please report any queries concerning the student data shown on the profile page to:

Email: portico-services@ucl.ac.uk

Help Desk: http://www.ucl.ac.uk/ras/portico/helpdesk
Publication Detail
“Too taxing on the mind!” Authentication grids are not for everyone
  • Publication Type:
  • Authors:
    Krol K, Papanicolaou C, Vernitski A, Sasse MA
  • Publisher:
    Springer International Publishing
  • Publication date:
  • Pagination:
    71, 82
  • Published proceedings:
    Human Aspects of Information Security, Privacy, and Trust, Volume 9190 of the series Lecture Notes in Computer Science
  • Volume:
  • Series:
    Lecture Notes in Computer Science
  • Editors:
    Tryfonas T,Askoxylakis I
  • ISBN-13:
  • Status:
  • Name of conference:
    HCI International
  • Conference place:
    Los Angeles, CA, USA
  • Conference start date:
  • Conference finish date:
  • Print ISSN:
The security and usability issues associated with passwords have encouraged the development of a plethora of alternative authentication schemes. These aim to provide stronger and/or more usable authentication, but it is hard for the developers to anticipate how users will perform with and react to such schemes. We present a case study of a one-time password entry method called the Vernitski Authentication Grid (VAG), which requires users to enter their password in pairs of characters by finding where the row and the column containing the characters intersect and entering the character from this intersection. We conducted a laboratory user evaluation (n=36) and found that authentication took 88.6s on average, with login times decreasing with practice. Participants were faster authenticating on a tablet than on a PC. Overall, participants found using the grid complex and time-consuming. Their stated willingness to use it depended on the context of use, with most participants considering it suitable for accessing infrequently used and high-stakes accounts and systems. While using the grid, 31 out of 36 participants pointed at the characters, rows and columns with their fingers or mouse, which undermines the shoulder-surfing protection that the VAG is meant to offer. Our results demonstrate there cannot be a one-size-fits-all replacement for passwords – usability and security can only be achieved through schemes designed to fit a specific context of use.
Publication data is maintained in RPS. Visit https://rps.ucl.ac.uk
 More search options
UCL Researchers
Dept of Computer Science
University College London - Gower Street - London - WC1E 6BT Tel:+44 (0)20 7679 2000

© UCL 1999–2011

Search by