The type of images used and the ways, in which users interact with them vary between implementations.
Each time the user is required to authenticate, they look for the images that fit their pre-chosen categories and enter the randomly generated alphanumeric character that appears in the image to form the one-time password.
[4] Draw-a-Secret is a type of graphical password that requires the user to draw a picture over a grid.
The user must exactly remember the user-drawn gestures in order to be authenticated.
[citation needed] A larger stroke count corresponds with an increase in security, since it is harder for an attacker to copy the strokes and the order in which they are performed.