HCI.TOP
C6.29

Dedicated Password Keyboards

Cards in this group · 4

  1. C6.29.1Some systems pop a randomized number pad on password fields to block position-based shoulder surfing
  2. C6.29.2Password keyboards usually turn off autocorrect and candidates so input is not leaked
  3. C6.29.3Randomized pads sacrifice touch-typing speed; that is a security–efficiency tradeoff
  4. C6.29.4Password fields should not use third-party IMEs' cloud candidate services, which can leak plaintext