# Passwordless Authentication Using a Combination of Cryptography, Steganography, and Biometrics
###### Abstract  
User-generated passwords often pose a security risk in authentication systems. However, providing a comparative substitute poses a challenge, given the common tradeoff between security and user experience. This paper integrates cryptographic methods (both asymmetric and symmetric), steganography, and a combination of physiological and behavioural biometrics to construct a prototype for a passwordless authentication system. We demonstrate the feasibility of scalable passwordless authentication while maintaining a balance between usability and security. We employ threat modeling techniques to pinpoint the security prerequisites for the system, along with choosing appropriate cryptographic protocols. In addition, a comparative analysis is conducted, examining the security impacts of the proposed system in contrast to that of traditional password-based systems. The results from the prototype indicate that authentication is possible within a timeframe similar to passwords (within 2 s), without imposing additional hardware costs on users to enhance security or compromising usability. Given the scalable nature of the system design and the elimination of shared secrets, the financial and efficiency burdens associated with password resets are alleviated. Furthermore, the risk of breaches is mitigated as there is no longer a need to store passwords and/or their hashes. Differing from prior research, our study presents a pragmatic design and prototype that deserves consideration as a viable alternative for both password-based and passwordless authentication systems.  
passwordless authentication; RSA; AES; fingerprint biometrics; keystroke dynamics; LSB steganography; android; iOS +
Footnote †: journal: Cybersecurity and Privacy  
18 January 202  
Our research goes beyond introducing a passwordless alternative; it involves a thorough examination of the system's performance, and security features. By assessing the strengths and limitations of our prototype, we contribute valuable insights to the ongoing discussions on improving authentication methods in the face of evolving cyber threats.  
As we delve into the intricacies of passwordless authentication, our research aims to clarify the effectiveness of our proposed system and its potential to redefine the standards of user authentication, offering heightened security without compromising user-friendliness. Our contribution encompasses three main aspects:  
* Authentication System Presentation: We introduced an authentication system with a promising trajectory. It enhances security while simplifying the user experience.
* Multifaceted Approach: Our approach combines cryptographic, steganographic, and biometric elements. It addresses both the security and usability aspects of authentication.
* Balancing Security and User-Friendliness: Our solution recognises the inherent complexities in balancing security and user-friendliness. It provides a more secure authentication system that eliminates the use of passwords or third-party hardware authentication, which provides a more secure passwordless authentication solution.