An Authenticated Method for a Secure Changing Password

Despite their age, passwords are still widely used more than ever. In many cases, it is the solution that best fits the usage scenario. Researchers are proposing innovative designs and methods to support these scenarios. Many systems, especially sensitive ones, need to change the password. Classic systems rely on changing passwords in two stages, the first i s authentication, which usually consists of two or three rounds, and the second is creating a new password (PW), which also consists of two or three rounds. In this paper, a hidden transmission of a new random PW using the previous one is presented, we talk about an authenticated changing of PW. The verifier g enerates half of the new password and sends it to the prover, the prover authenticates the sent message using the old PW and then returns the authentication proof. After checking it, the verifier creates the second half of the PW. The proposed method combines the authentication and change PW processes into one process consisting of 3 rounds. Therefore, the proposal facilitates the process of automatic periodic change of PW between two entities (user, app, system, etc). Analysis and experiments show that our technique is robust, lightweight, and reduces many potential risks in the field.