erratically they will often attribute the absence of security indicators to non malicious errors 41 in addition most users cannot distinguish between actual hyperlinks and spoofed hyperlinks that display one url but link to a different url i e urls of the form lt a href u2018 http phishing org u2019 gt lt img src u2018 ebay url jpg u2019 gt lt a gt furthermore users are unable to reliably parse and understand domain names or pki certificates clearly current technology makes it difficult for even a knowledgeable user to consistently make the right decision particularly when security is not a primary goal as a result we argue that anti phishing techniques must minimize the user 39 s security responsibilities while no automated procedure can provide complete protection our protocol guards the secrecy and integrity of a user 39 s existing online accounts so that attacks are no more effective than pre internet scams e g an attacker may still be able to access a user 39 s account by subverting a company insider we base our system on the observation that users should be authenticated using an additional authenticator that they cannot readily reveal to malicious parties our scheme establishes the additional authenticator on a trusted device such that an attacker must compromise the device and obtain the user 39 s password to access the user 39 s account the trusted device in our system can take the form of a cellphone pda smart watch usb dongle smart card laptop or even as software on the primary computing platform in.