90
VIEWS
Passmark is a technology that displays an image configured by the user when the user logs in to a website, allowing the user to distinguish a phishing site from the genuine site and preventing them from entering their password on the phishing site.
This technique is currently used by many sites, and in yesterday’s article I wrote that it might be effective against phishing, but apparently that is not necessarily the case.
According to recent research, an astonishing 92% of users enter their password even when the correct image is not displayed.
It would hardly be an exaggeration to say that this makes it almost ineffective.
A detailed report is available here. (English)
Does this mean a token is necessary after all?!