Picture password is a Windows sign-in method that replaces typed characters with gestures drawn on a chosen image. A user sets up a sequence of taps, lines, and circles at specific points on the picture, and the same pattern is used to unlock the account. It is designed for convenience and fast local sign-in, especially on touch devices.
In security terms, picture passwords are a legacy authentication option and are usually less resilient than stronger modern methods such as PINs or biometrics. The visible image and gesture style can make them easier to shoulder-surf than a complex password, and simple patterns may be easier to guess. Defenders often restrict or disable this sign-in path through policy on managed Windows systems, reducing the number of authentication methods users can choose from and narrowing the attack surface.


