To print: Click here or Select File and then Print from your browser's menu

This story was printed from silicon.com, located at http://www.silicon.com/

Story URL: http://software.silicon.com/security/0,39024655,11032224,00.htm

Forgotten your password? Don't worry, Microsoft's drawn you a picture
Steganography strikes back

By Pia Heikkila

Published: Friday 22 March 2002

Microsoft boffins have developed technology which uses pictures to help people who have trouble remembering their passwords.

The system is designed to replace conventional passwords altogether. It works by displaying a series of images to the user who clicks on those which make up their visual password.

The images are made up of pixels, which are converted by Microsoft's software into random numbers which work as encrypted passwords.

Microsoft said users don't have to rely on their memory to remember complicated number and word combinations. The company also claimed people can remember pictures better than letters.

Hiding messages inside pictures is nothing new, but many see the practice, known as steganography, being an answer to the current problems with passwords.

Jose Lopez, an analyst at Frost and Sullivan, said: "I think this could be a very good idea if properly implemented. At the moment one of the main concerns for systems administrators is the uncountable calls they receive from users who have forgotten their passwords, especially in those companies where regular change of passwords is a common practice.

"Therefore they will welcome any initiative that reduces their work and helps towards achieving greater efficiencies within the company."

Neil Barrett, CTO of security consultancy International Risk Management, added: "I personally welcome technologies which can prevent malicious hackers accessing critical information. However, password protection is just part of the picture. We must remind users to stay vigilant at all times."