I was having a discussion with a co-worker earlier this morning related to passwords and the future of computing. One of the topics we discussed was whether passwords could be replaced with visual or interactive security measures and whether users would adopt this kind of security.
Take cellphones for example: the iPhone uses a 4 digit numeric passcode and the T-Mobile G1 uses a specific finger swipe to access the phone when locked.
I've heard and read about security tools that rely on someone visually identifying something and picking it out of a group to authentic who they are; PassFaces is a great example of this, but how safe is it? There are 9 options to chose from; either they are constantly changing (with the exception of the correct answer) which would eventual single out of the correct choice or they are always same but in that case only 8 wrong answers would be necessary to determine the correct selection. (This is definitely a simplification of their tool.)
SO is a collection of bright minds and I've love to hear your views on visual passcodes.
Do you think users would be willing to accept visual passcodes in a web environment? What do you feel are some of the Pros and Cons?