We propose a gaze-based authentication method using a new type of graphical password. After registering keypoints in an image as a secret, the user can unlock the device by gazing at them in the registered order on a randomly displayed image. We present the design and implementation of our authentication method and report the results of a feasibility study utilizing mobile devices. Our prototype implementation achieved an acceptance rate of 86.0%.