On some internet banking websites, I've seen some CVV input fields that seem strange to me. Here is an example:
The field works as such:
- You can not input a CVV code using a keyboard.
- The numbers are never in their normal order (1, 2, 3...).
- The positions of the numbers are shuffled each time you open the CVV input panel.
So my question is:
Is there a point in making the numbers shuffled each time you want to input a CVV code?
I understand that you might want to disable the keyboard input and use a mouse instead to defend from keyloggers, but is there any point in making the positions of the numbers shuffled?
I do also understand that this approach is a good idea on a touch display as it removes the posibility of guessing the pin by the fingerprints on the display, but the cursor does not leave any fingerprints behind.
And if this is made to defend from keylogers that also log your mouse clicks, is it actually effective, knowing that if the keylogger logs your mouse clicks, there is no reason it can not also make screenshots?