Graphical Password
Shoulder-Surfing-Resistant Visual Authentication

About the project

Traditional text passwords are vulnerable to shoulder-surfing (observation attacks) and force users to type long, complex alphanumeric credentials. This project replaces them with a graphical authentication UI built in Python + Tkinter, where users select graphical patterns or images as credentials on a configurable grid — improving both security and user experience.

What I built / how it worked

• Visual credential scheme — users authenticate by selecting graphical patterns or images on a grid instead of typing text, making credentials far harder to observe or copy.
• Configurable grid size — the grid is configurable, increasing the credential space and brute-force resistance relative to fixed-size schemes.
• Observation resistance — graphical selection is inherently harder to capture via shoulder-surfing than typing, reducing the observation-attack surface.
• Recognition — finished runners-up among 10 teams in the internal hackathon (May 2022).

Feature highlights

• Visual, graphical-pattern authentication replacing text credentials.
• Configurable grid size boosting credential space and brute-force resistance.
• Shoulder-surfing / observation-attack resistance.