!!! Overview
A [{$pagename}] (or [Passphrase], [Passcode], [Passkey], [PIN]) is a [Token] which is a [credential] that a claimant typically memorizes and uses for [Authentication] typically of a [Digital Identity].
A password is considered a [Knowledge Factor] ([Something You Know]) as an [Authentication Factors]
A [Password] is a [secret] value that may be utilized to provide [Authentication] in [Password Authentication].
[{$pagename}] are typically character strings, however some systems use a number of images that the subscriber memorizes and must identify when presented along with other similar images.
Despite the name, there is no need for passwords to be actual words. [{$pagename}] which are not actual words may be harder to guess, a desirable property.
The terms [Passcode] and [Passkey] are sometimes used when the secret information is purely numeric, such as the personal identification number [PIN] commonly used for ATM access. Some passwords are formed from multiple words and may be referred to as a [Passphrase].
We will refer to any of these which are all generally [{$pagename}]s of one form or another:
* [{$pagename}]
* [Passcode]
* [PIN]
* [Passphrase]
* [Passkey]
* [Password Token]
All are a secret value that may be utilized to provide [Authentication] in some [Authentication Methods].
A [Password] is a secret value that may be utilized to provide [proof of identity|Authentication] in some [Authentication Method]. In particular, a password is used in:
* [Simple Authentication]
* [CRAM-MD5 SASL Mechanism]
* [DIGEST-MD5]
* [PLAIN SASL Mechanism] [SASL] mechanisms.
The security that a password provides is based entirely on the fact that only the password's owner [knows|Knowledge Factor] the password value. If someone else learns a user's password through some means, then that third party can [impersonate|Impersonation] that user and may be able to perform any operation available to that user.
Most [LDAP Server Implementations] provides a number of [Password Policy] features that can be used to help ensure that passwords are not discovered by third-party individuals (e.g., helping to ensure that users aren't allowed to use weak passwords, providing protection against brute-force attacks, requiring authentication attempts and [password Changes] from being performed in a secure manner, etc.), but nevertheless [{$pagename}]s are often considered weaker forms of protection than other [Authentication Methods] like [certificates].
!! [Password Management]
One of the issues with using [{$pagename}]s is [Password Management].
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]