We've been experimenting with the power of visual recognition for some time, but for the most part it's been used for pretty lacklustre applications, especially nothing with any lasting utility for the average users. What it offers, however, is a truly cross-platform solution, as everything has a camera can recognise the same things without needing a custom comm protocol or hardware component to work across devices.

After the last press on password leaks, and our subsequent whining on having to change passwords yet again, needing to remember something secure, something with capitals, numbers ampersands, that was not a word or sequence, and needing a new one for every account we have. And we have a lot. Like, tons. Seriously.

Passage (PASSword imAGE, get it?) is our answer to that annoyance. Instead of a password or hardware token, we wanted something cheap, convenient, secure and elegant to log our credentials without having to type another ridiculous password on a mobile keyboard. Using CV APIs, we can register an image as an authentication token by uploading snapshot of it, and then when logging in, the site connects to a database and checks an image held up to a webcam to match against it. When there's a match, it's checked against your username, and if that matches, you're in. No keyboards, no muss, no fuss, no whining.

We're pretty proud of the stitched-together sever/socket calls that serve as a central clearing-house for any incoming byte arrays of images, whether they come from mobile, HTML5, or the Chrome extension we've worked up, which could serve as the base for a password manager that lives right in the browser menubar. This lets an image registered on one device be recognised on any other, since they all encode in exactly the same way.

Passage is meant as a solution for anyone with lots of passwords (nice addressable market, that) and lots of different devices (same story, really). By using an image as a token, users have an easily replaceable authentication credential that works across every device, keeps all credentials secure behind literal paper wall.

Share this project: