Spin-lock gesture authentication for mobile devices

The security of authentication mechanisms on touchscreen mobile devices is often at risk due to various usability barriers. The most common authentication step mobile users go through is the lock screen that blocks access to the entire device. This is subject to a usability-vs-security tension: users want quick and easy access to their phones while ensuring it is protected from unauthorized access. Since ease-of-use is a critical attribute for any new authentication mechanism, we propose an authentication system inspired by an intuitive real-life paradigm, the single dial combination (spin) lock, and evaluate its usability and user acceptance. We show that a Spin-lock authentication is perceived by users as more enjoyable than other lock methods. We use this to discuss implications for the design of mobile authentication mechanisms and suggest situations for which real-life inspired locking systems may be preferable.