Background: Cryptanalytic attacks like Brute Force and Dictionary Attacks over password-only remote login services are widespread now-a-days. The major challenge is to allow the genuine users to login by preventing such attacks. Method: PGRP (Password Guessing Resistant Protocol) and PCCP (Persuasive Cued Click Points). Results: It gives a security mechanism for preventing the fraudulent user from using the system and also tries to identify the details of fake user. Application: User Authentication Based Systems