Abstract
Creating an authentication system that ensures both robust security and an intuitive, user-friendly interface is a complex and challenging endeavor. The primary challenge is reconciling two essential factors: security, which frequently necessitates intricate and less user-friendly approaches, and usability, which requires a system that users can readily comprehend and engage with. Achieving this balance is tricky, as enhancing one component often undermines the other, complicating the design of an authentication system that excels in both domains. This paper presents a graphical authentication system that improves the security and usability of current authentication methods. This enhancement is accomplished by synthesizing several processes innovatively to rectify the deficiencies of existing security systems. These mechanisms encompass multistep authentication, the drawmetric mechanism for enhancing password memorability, the implementation of one-time passwords (OTPs) with randomly selected password components, the random arrangement of password elements at various stages, the allocation of random numbers to password components, the utilization of the bcrypt hashing algorithm, which employs a salted method and iterative process, and the generation of JSON Web Tokens for secure data transmission and verification. This paper introduces a novel viewpoint on current graphical password implementation strategies within the authentication system. Rethinking current methodologies creates new opportunities for innovation in security techniques.