partial_password
Partial password
Return to Shoulder surfing
- Snippet from Wikipedia: Partial password
A partial password is a mode of password authentication intended to make keystroke logging and shoulder surfing less effective.
By asking the user to enter only a few specific characters from their password, rather than the whole password, partial passwords help to protect the user from password theft. As only part of the password is revealed at once it becomes more difficult to obtain the password using techniques such as keystroke logging or shoulder surfing.
A paper by David Aspinall and Mike Just describes partial password implementations and attacks in a detailed study.
Tested with 110,000 simulations using passwords longer than 8 characters long, Junade Ali has noted:
- 58% of passwords are revealed in entirety after 7 logins, 90% after 12 and 99% after 19 logins.
- Using a dataset of 488,129 breached passwords, 58% of tested 3-character password segments were only valid for that password in the database. Additionally, 28% could be associated with only one other password and 8% with two other passwords.
partial_password.txt · Last modified: 2024/04/28 03:26 (external edit)