4 ms·

Or scramble the numeric keypad on every try, but that would get annoying fast.

• adevine 10y ago
  I've seen some secure financial sites that already do that.
• pmontra 10y ago
  My bank did that with a JavaScript number pad. They went back to a standard password field with the new design of the site a couple of years ago. That made me feel less safe because I understood why the were complicating the input. Another strategy I've seen is to ask some random digits of a longer PIN, with a mask to fill out.
  • dTal 10y ago
    Some banks (e.g. Barclays) use a card reader that generates a unique key each time. Since this also requires that you have your card to log in, it's my understanding that this offers massively improved security.
• ultrasandwich 10y ago
  Convenient option on Cyanogenmod. Been using it for about 2 years and it's surprisingly easy to get used-to.
• birdman3131 10y ago
  Anybody who plays Runescape will recognize this. They have a pin you can set to gain access to your in game bank. It has a fair few security features to combat keyloggers which were (and still can be) a major issue. Some security features I can recall. Random layout of the numbers on both the button itself and which button has which number. This is shuffled on every click. Upon clicking all numbers and the mouse pointer vanish. This prevents screenshots taken on clicks by some keyloggers from working. No keyboard input. Annoying but needed to combat keyloggers. http://vignette2.wikia.nocookie.net/2007scape/images/c/c3/Bank_PIN_interface.png/revision/latest?cb=20160416095619 http://vignette2.wikia.nocookie.net/2007scape/images/c/c3/Ba...