Password Authentication and Security

Front

What is the most-used form of authentication for websites and applications?

Back

Passwords.

Front

What are the three types of authentication?

Back

1. Knowledge-based (something you know) 2. Possession-based (something you have) 3. Inheritance-based (something you are)

Front

What does knowledge-based authentication include?

Back

Traditional passwords.

Front

What is possession-based authentication?

Back

Verifying identity using something that only the intended user would have, like a physical key card.

Front

What is inheritance-based authentication?

Back

Typically biometric characteristics such as a fingerprint or facial scan.

Front

What is password authentication?

Back

A process that involves a user inputting a unique ID and key that are checked against stored credentials.

Front

How are passwords typically stored?

Back

In an encrypted fashion, often using salting and hashing.

Front

What is a password alternative?

Back

Any authentication protocol that doesn’t utilize a typical ID and key to grant access.

Front

What is an example of a password alternative?

Back

Email authentication.

Front

What are some common vulnerabilities in password authentication?

Back

1. User-generated credentials 2. Brute-force attacks 3. Recycled passwords 4. Large-scale breaches.