Password security system with 2-way authentication

Abstract

This paper proposes a password security system that allows the host not to store the passwords of its users at its end. Instead it creates and stores a derivative of the password with the help of a bitmap image uploaded by the user during the user creation process. During the login attempts of users, the user is required to enter the password and upload the same image. the proposed system verifies if the image uploaded during login matches with the original image that was provided during user creation by comparing their pixel information. Then, the system derives the password from the image with the help of the stored derivative. Then, the derived password is matched with the password entered by the user.