See this paper:
http://www.usenix.org/publications/library/proceedings/sec99/full_papers/jermyn/jermyn.pdf
Basically you draw a grid, then record stylus events,
quantized to grid coordinates. The user can select any
pattern they like. This is then used instead of a
conventional encryption password. Not only is this
more natural than entering text on the PDA, it is
relatively immune from dictionary attacks, since nobody
has created a pattern dictionary yet..
Another strategy is to pick a sequence of icons,
spelling out a story of some kind as a mnemonic. Then
they are presented in random position on the screen and
you click on the same icons in the same order to enter
your key.
Logged In: NO
I second that, as it would be harder for a trojan to pick up
than . (Personally, I would prefer to have numbers/letters
randomly placed on a grid.)