Unaided authentication services provide the flexi-bility to login without being dependent on any additional de-vice.The power of recording attack resilient unaided authen-tication services(RARUAS)is undeniable as,in some aspects,they are even capable of offering better security than the bio-metric based authentication systems.However,high login com-plexity of these RARUAS makes them far from usable in prac-tice.The adopted information leakage control strategies have often been identified as the primary cause behind such high lo-gin complexities.Though recent proposals have made some sig-nificant efforts in designing a usable RARUAS by reducing its login complexity,most of them have failed to achieve the de-sired usability standard.In this paper,we have introduced a new notion of controlling the information leakage rate.By maintain-ing a good security standard,the introduced idea helps to reduce the login complexity of our proposed mechanism-named as Textual-Graphical Password-based Mechanism or TGPM,by a significant extent.Along with resisting the recording attack,TGPM also achieves a remarkable property of threat detection.To the best of our knowledge,TGPM is the first RARUAS,which can both prevent and detect the activities of the oppor-tunistic recording attackers who can record the complete login activity of a genuine user for a few login sessions.Our study re-veals that TGPM assures much higher session resiliency com-pared to the existing authentication services,having the same or even higher login complexities.Moreover,TGPM stores the password information in a distributed way and thus restricts the adversaries to learn the complete secret from a single com-promised server.A thorough theoretical analysis has been per-formed to prove the strength of our proposal from both the se-curity and usability perspectives.We have also conducted an experimental study to support the theoretical argument made on the usability standard of TGPM.