Everything about Password
Text used for user authentication to prove identity
A password, sometimes called a passcode, is secret data, typically a string of characters, usually used to confirm a user's identity. Traditionally, passwords were expected to be memorized, but the large number of password-protected services that a typical individual accesses can make memorization of unique passwords for each service impractical. Using the terminology of the NIST Digital Identity Guidelines, the secret is held by a party called the claimant while the party verifying the identity of the claimant is called the verifier. When the claimant successfully demonstrates knowledge of the password to the verifier through an established authentication protocol, the verifier can infer the claimant's identity. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: PasswordA 5-minute orientation
- Skim a recent paper: Secure Password-Protected Encryption Key for Deduplicated Cloud Storage SystemsInfluential work since 2022
- Pick up a classic book: Validating the correctness of hardware implementations of the NBS data encryption standardThe most-reprinted book on the subject
- Read the landmark paper: Password authentication with insecure communicationCited 2,016 times
- Go sideways: Key derivation functionA closely related topic
- Go sideways: Password crackingA closely related topic
📖 Definitions
Noun A word relayed to a person to gain admittance to a place or to gain access to information.
Noun A string of characters used to log in to a computer or network, to access a level in a video game, and so on; archetypally a word but nowadays often an alphanumeric string or a phrase.
Verb To protect with a password.
🏆 Landmark papers (most cited)
Password authentication with insecure communication
Password security
Password memorability and security: empirical results
PassPoints: Design and longitudinal evaluation of a graphical password system
A Molecular Keypad Lock: A Photochemical Device Capable of Authorizing Password Entries
Strong password-only authenticated key exchange
An improved smart card based password authentication scheme with provable security
A remote password authentication scheme for multiserver architecture using neural networks
🆕 Influential since 2022
Secure Password-Protected Encryption Key for Deduplicated Cloud Storage Systems
Quantum-Safe Round-Optimal Password Authentication for Mobile Devices
Password-Guessing Attack-Aware Authentication Scheme Based on Chinese Remainder Theorem for 5G-Enabled Vehicular Networks
PASSWORD HASHING METHODS AND ALGORITHMS ON THE .NET PLATFORM
MAGLeak: A Learning-Based Side-Channel Attack for Password Recognition With Multiple Sensors in IIoT Environment
📚 Books worth reading
Validating the correctness of hardware implementations of the NBS data encryption standardJason Gait · 1977
The design of RijndaelJoan Daemen, Vincent Rijmen · 2002- 📕A key notarization system for computer networksMiles E. Smid · 1979
Alice and Bob Learn Application SecurityTanya Janca · 2020- 📕Password usageUnited States. National Bureau of Standards · 1985
Maintenance testing for the Data Encryption StandardJason Gait · 1980
Grundlagen Handy Sicherheit 2026Lian Herzberg · 2026
Fast Software EncryptionMitsuru Matsui · 2002
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Key derivation function In cryptography, a key derivation function (KDF) is an algorithm that derives one or more secret keys from a secret value, such as a master key, a password…
- Password cracking In cryptanalysis and computer security, password cracking is the process of guessing passwords protecting a computer system. A common approach (brute-force…
- Passphrase A passphrase is a sequence of words or other text used to control access to a computer system, program or data. It is similar to a password in usage, but…
- Password strength Password strength is a measure of the effectiveness of a password against guessing or brute-force attacks. In its usual form, it estimates how many trials…
- Password policy A password policy is a set of rules designed to enhance computer security by encouraging users to employ strong passwords and use them properly. A password…
- Key stretching In cryptography, key stretching techniques are used to make a possibly weak key, typically a password or passphrase, more secure against a brute-force…
- Pepper (cryptography) In cryptography, a pepper is a secret added to an input such as a password during hashing with a cryptographic hash function. This value differs from a…
- Authenticator An authenticator is a means used to confirm a user's identity, that is, to perform digital authentication. A person authenticates to a computer system…