Microsoft Improves Picture Passwords in Windows 8

Related Links

According to slashgear.com, Microsoft will be introducing picture based passwords. This really isn't new, but is different than what was released in 2008 as part of the Origami Experience 2 (now called UMPC [Ultra Mobile PC]) on Windows Vista.

Like the older incarnations, it only works with touch screens. You may configure your own image and then draw with your finger on top of the image in a pattern only you know. If you used the original version you touched a series of points rather than drawing a continuous line. Note: We're not sure if the line method was available with the Windows 7 version of UMPC. If you know, please comment!

Our sample picture was used for our Lastpass review. We overlaid it with a possible picture password. In real life, you will select a picture and use your finger on the touch screen to trace a pattern over the picture.

We started by tracing from the bottom corner to the top corner of the black Amazon FOB then traced down to the key-press area of the YubiKey (Lastpass) and finally stopped at the LED of the IronKey.

Picture passwords are not new. The National Institute of Standards and Technology, released NISTIR 7030 in July 2003. This specification has become dated and was much more simplistic than the current picture password implemented by Microsoft.

Microsoft has not revealed details behind this authentication method, but it has the potential to be a very strong and secure system. The biggest drawback right now is lack of hardware support. Touchscreen devices have recently taken a huge leap thanks to tablet devices like the IPAD, but Microsoft does not have a large installed base of touchscreen devices.

This type of authentication is one step closer to the tried-and-true signature used since the feather quill, but only gets you onto the tablet. It won't help you to log in to your favorite website yet.