Usability and security of recognition-based textual password