Authentication Methods
Done by: Aram – Year 9B
Authentication methods are essential for securing
access to systems, applications, and data by verifying
the identity of users. These methods can be broadly
categorized into three types: something you know (ex:
passwords), something you have (ex: security tokens),
and something you are (ex: biometrics). Here's an in-
depth description of the several authentication
methods:
1.Password-Based Authentication
The most common method, requiring users to create
and remember alphanumerical characters.
Advantages Disadvantages
Vulnerable to attacks like
phishing.
Users often choose weak
Simple to set up and use.
passwords and reuse
them across multiple
sites.
2. Two-Factor Authentication (2FA)
Enhances security by requiring two forms of verification
from different categories (ex: password and mobile
OTP).
Advantages Disadvantages
Significantly increases Can be inconvenient.
security over password- Relying on Mobile Devices
can be a weak point if the
only methods.
device is compromised.
3. Multi-Factor Authentication (MFA)
Expands on 2FA by using two or more independent
verifications from different categories (ex: password,
hardware token, and fingerprint).
Advantages Disadvantages
Provides strong security
More complex to set up
by requiring multiple
and use.
verification methods.
4. Biometric Authentication
Uses unique biological characteristics (ex: fingerprints,
facial recognition, iris scans).
Advantages Disadvantages
Difficult to forge and steal.
Convenient because users Privacy Concerns.
don’t need to remember Can be expensive.
anything.
5. Security Tokens
Hardware Tokens: Physical devices (ex: USB keys,
smart cards) that generate or store authentication
codes.
Advantages Disadvantages
High Security.
Risk of loss or damage.
Cannot easily be
Inconvenient to carry.
compromised.
Software Tokens: Applications on mobile devices
that generate time-based or event-based OTPs (ex:
Google Authenticator).
Advantages Disadvantages
Convenient.
Vulnerable if the mobile
Cheaper than Hardware
device is compromised.
Tokens.
6. Public Key Infrastructure (PKI)
Uses pairs of cryptographic keys (public and private
keys) issued by a trusted certificate authority (CA).
Advantages Disadvantages
Complex to set up and
Strong security through
manage.
encryption.
Requires a trusted CA.
7. Single Sign-On (SSO)
Allows users to log in once and gain access to multiple
systems without re-entering login details.
Advantages Disadvantages
If the SSO login details are
Convenient for users.
leaked and compromised,
Reduces password
all linked systems are at
problems.
risk.
8. Federated Identity Management
Allows users to use the same identification data across
different domains or organizations (ex: using Google or
Facebook accounts to log in to third-party services).
Advantages Disadvantages
Simplifies user Relies on the security of
management. the federating entity.
9. Risk-Based Authentication
Adapts the authentication process based on the risk
level of the login attempt (ex: additional checks for
logins from unfamiliar locations or devices).
Advantages Disadvantages
Balances security and
Requires professional
convenience by applying
monitoring and analysis
stronger authentication
tools.
only when needed.
10. Behavioral Biometrics
Analyzes patterns in user behavior (ex: typing rhythm,
mouse movements) to verify identity.
Advantages Disadvantages
Continuous
authentication.
Privacy concerns.
Difficult to imitate
behavior.
