To Shuffle or Not to Shuffle: Evaluation of the Effect of Shuffling on Celebrity Passfaces
摘要
Passfaces are graphical passwords that use facial images arranged in grids as password digits. A study utilized faces of celebrities as passfaces that were found to be as memorable as PINs, even among emergent users. However, the grid was not shuffled at the time of recall, raising security concerns regarding shoulder-surfing and smudge attacks. We extend their work by assessing the impact of grid shuffling on usability and memorability. We present a within-subjects, counterbalanced, longitudinal study with 100 university students that systematically compares the performance of Celebrity Passfaces presented in two conditions at recall time, one presented in the same positions (Non-shuffled) and one by shuffling the arrangement (Shuffled). Results showed no significant difference in the 10-day memorability between shuffled (98.97%) and non-shuffled (96.91%) conditions (p = 0.3033), indicating shuffled grids maintain similar usability and memorability as non-shuffled grids. While people took relatively more time to recall the shuffled passfaces in Recall 1 (31.41 s) than non-shuffled passfaces (20.78 s), and more time to recall the non-shuffled passfaces in Recall 2 and 3 (41.25, 46.10 s respectively) compared to shuffled passfaces (38.76, 45.26 s respectively), there was no significant difference between the two conditions in any of the Recalls. We present an analysis of the security and memorability of the faces used in Celebrities passfaces and compare it with the previous study.