Experts at Newcastle University analysed the movement of a smartphone as the screen was used.
They say they cracked four-digit Android pins with 70% accuracy on the first guess and 100% by the fifth.
The team of cyber-experts claim tech companies know about the problem but can't figure out what to do about it.