Multi-Factor Authentication Web Security System Based on Facial Recognition, One Time Password, and Hashed Secure Question

Abstract

Web application authentication is a critical aspect of digital security, serving as both the first and last line of defense for safeguarding sensitive information. Unfortunately, traditional text-based passwords are susceptible to a variety of attacks, leaving many web apps vulnerable to data theft by unauthorized users. As a solution, this study developed a multi-factor authentication technique to bolster the conventional username and password method. Utilizing Agile methodology, the proposed solution examined current authentication practices and evaluated the feasibility of multi-factor authentication. The system generates a one-time password (OTP) using the user's login credentials and incorporates additional steps such as face recognition and secure hashed questions for user authentication. To enhance security and user flexibility, the system was implemented using Python programming language, various Python libraries, and an image processing library.