Recognition-Based Retrieval Significantly Enhances Alphanumeric Password Memorability

ObjectiveThis study aimed to isolate the source of memorability benefits in recognition-based graphical authentication. The effects of retrieval (recall vs. recognition) and font representation (plain vs. distinctive) on usability measures were examined.BackgroundStrong system-assigned passwords are difficult to remember. This motivates next-generation authentication to develop schemes that are memorable. Some researchers claim that their memorability improvement is due to dual-coding in long-term memory, while others highlight recognition retrieval. A distinctiveness theory was employed to transform text into images. This study examined whether text distinctiveness and recognition could yield memorability improvements while still using strong system-assigned alphanumeric passwords.MethodParticipants learned strong alphanumeric passwords using both traditional (recall) and Use Your Illusion (UYI) (recognition) authentication schemes. The UYI scheme presented the passwords in either plain or distinctive fonts. After practice with each authentication type, participants completed a test login after 5 minutes and 3 weeks later. Measurements included initial practice errors, login errors, login time, and ease ratings.ResultsManipulating font distinctiveness did not significantly improve memorability. Recognition-based UYI interactions significantly outperformed recall-based password entry on all metrics after a 3-week delay. Text-based recognition achieved high memorability, comparable to performance reported for a graphical authentication benchmark.ConclusionAuthentication memorability was primarily driven by the retrieval type. Transforming passwords into images did not enhance memorability, possibly due to a ceiling effect. However, employing a recognition-based scheme dramatically increased text password memorability.ApplicationFindings suggest designers can significantly enhance authentication memorability by leveraging recognition memory, even with standard text.