Passwords are currently used as the main method to authenticate a user to the system. After a user submits the correct username and password, the system will allow a user to log in and access its functionality based on the authorization given to that username.
The following three factors can be used to categorize authentication types:
- Something you know: This is usually called the first factor of authentication. A password is categorized in this type. In theory, this factor should only be known by the authorized person. In reality, this factor can easily be leaked or captured; therefore it is not advisable to use this method to authenticate users to a sensitive system.
- Something you have: This is usually called the second factor of authentication, examples of this factor include security tokens and cards. After you prove to the system that you have the authentication...