Factors of Authentication
There are three authentication factors that can be used for granting access:
- Something you know (for example, a password, PIN, or some other personal information)
- Something you have (for example, a token, a one-time password, or a smart card)
- Something you are (for example, biometric features such as a fingerprint or iris scan or voice recognition)
Two-factor authentication means the use of two authentication methods from the preceding list. For critical systems, it is advisable to use more than one factor of authentication for granting access.
From the user's perspective, two-factor authentication can cause additional hassle. Hence, the security manager should strike the correct balance between ease of access and control.
Password Management
Password strength is a measure of the effectiveness of a password against guessing or brute-force attacks.
Strong and complex passwords should be one of the most important...
