A comparison of perceived and real shoulder-surfing risks between alphanumeric and graphical passwords.