Abstract: In order to simplify the complexity of authentication and re-certification process in electronic commerce, a new authentication scheme based on graphical password was proposed. To overcome the problem of being easy attacked in text authentication, a graphical password was used along with text prompts for identifying and memory in the authentication process. And a random fuzzy graphics authentication scheme was used to resist educated guess attacks. Experiment results show that, the authentication scheme based on random fuzzy graphics is safe and easy to operate in re-certification and to resist guessing attacks in the electronic commerce websites. Results also demonstrate that the proposed scheme is superior to the traditional scheme in terms of the time of registration, the success rate of login, the authentication time and the number of attempts. Thus it is efficient, effective, and suitable in E-commerce applications.