Passwordless Authentication Using a Combination of Cryptography, Steganography, and Biometrics

Today's article comes from the Journal of Cybersecurity and Privacy. The authors are Oduguwa et al., from the University of the West of England. In this paper they propose a new "passwordless" system for web-authentication (website logins). At its core the system uses push-notifications, but the authors have added some interesting safeguards that use typing-behavior as a biometric and secretly store encrypted data within the images on your device. There are a lot of moving pieces to this system, so let's jump in:

DOI: 10.3390/jcp4020014