Smartphone pattern passwords are not secure

Researchers recently showed how mobile security attackers can remotely crack any pattern lock on Android devices.

According to Zdnet, attackers can break any pattern lock on Android in just 5 allowed attempts, achieving a success rate of up to 95%.

British and Chinese researchers have performed a side channel attack using video captured from a smartphone camera and a computer vision algorithm to crack the pattern lock.

Pattern lock codes should not be used to store important data. Photo: Zdnet.

They found that more complex keys were easier to break (95%) than simple (60%) and medium (87%) keys.

Attackers will film the victim while unlocking, take advantage of the victim's absence to access the device and jailbreak, steal data, and even install malware.

However, this attack can only be done using shoulder surfing techniques. However, it is advised that all Android users should not use pattern locks to store important data.

"Pattern lock is a very popular form of password nowadays, especially on Android devices. Users often set complex passwords for their banking or online shopping accounts because they believe it is safe," said Dr. Zheng Wang, a lecturer at Lancaster University. "However, we found that using pattern lock to protect important data is actually very dangerous."

In addition, security forms using passwords or PINs are also vulnerable to side-channel attacks.

To avoid being hacked, researchers recommend that users use all their fingers when drawing their password.

According to Zing