Android Unlock Pattern (AUP) is currently the most widely used graphical password unlocking scheme on portable devices like mobile phones and pads. However, the available password in practice occupies only a fraction of the graphical password space, and the uneven distribution of the password caused by the user’s habitual choices makes the security of AUP far lower than that in theory and makes the password much easier to be cracked by attackers. This paper proposes a graphical password scheme based on multi-stroke graphics and numbers (MSDGP),which recommends a password of the corresponding difficulty level according to the user’s selection. This scheme is similar with AUP. Due to the difference of the numbers and their locations, the graphical password space is greatly enlarged. Besides, the scheme can solve the uneven distribution caused by the user’s habitual choices as the password is recommended by the system, which effectively avoids brute cracks and dictionary attacks and owns a higher security.