memorized secret

{
  "id": "MLC-T-CYB-002650",
  "term": "memorized secret",
  "field": "Cybersecurity",
  "definition": "1. A string of characters (letters, numbers, and other symbols) used to authenticate an identity or to verify access authorization.\n\n2. A string of characters (letters, numbers, and other symbols) that is used to authenticate an identity, to verify access authorization, or to derive cryptographic keys.\n\n3. A type of authenticator consisting of a character string that is intended to be memorized or memorable by the subscriber to permit the claimant to demonstrate something they know as part of an authentication process. Passwords were referred to as memorized secrets in the initial release of SP 800-63B.\n\n4. A string of characters (letters, numbers and other symbols) that are used to authenticate an identity, to verify access authorization or to derive cryptographic keys.\n\n5. A protected/private string of letters, numbers, and/or special characters used to authenticate an identity or to authorize access to data.\n\n6. A string of characters (letters, numbers and other symbols) that are used to authenticate an identity or to verify access authorization. A passphrase is a special case of a password that is a sequence of words or other text. In this document, the use of the term “password' includes this special case.\n\n7. A string of characters (letters, numbers and other symbols) that are used to authenticate an identity or to verify access authorization.\n\n8. A type of authenticator comprised of a character string intended to be memorized or memorable by the subscriber, permitting the subscriber to demonstratesomething they knowas part of an authentication process.\n\n9. See memorized secret.\n\n10. A string of characters (letters, numbers and other symbols) that is used to authenticate an identity, to verify access authorization or to derive cryptographic keys.\n\n11. A type of authenticator comprised of a character string intended to be memorized or memorable by the subscriber, permitting the subscriber to demonstrate something they know as part of an authentication process.\n\n12. A string of characters (letters, numbers and other symbols) that are used to authenticate an identity or to verify access authorization. A passphrase is a special case of a password that is a sequence of words or other text. In this document, the use of the term “password” includes this special case.\n\n13. A string of characters (letters, numbers and other symbols) that are used to authenticate an identity, verify access authorization or derive cryptographic keys.\n\n14. A string of characters (letters, numbers, and other symbols) that are used to authenticate an identity or to verify access authorization. A passphrase is a special case of a password that is a sequence of words or other text. In this Recommendation, the use of the term “password” includes this special case.\n\n15. Confidential authentication information, usually composed of a string of characters.\n\n16. A secret shared between the user and the party issuing credentials. Memorized Secret Tokens are typically character strings (e.g., passwords and passphrases) or numerical strings (e.g., PINs).\n\n17. A secret that a Claimant memorizes and uses to authenticate his or her identity. Passwords are typically character strings.",
  "abbreviation": "password",
  "references": [
    "NIST SP 800-82r3 from FIPS 140-2; NIST SP 800-12 Rev. 1 from FIPS 140-2; NIST SP 800-82 Rev. 2 [Superseded]",
    "NIST IR 8459",
    "NIST SP 800-63-4",
    "NIST SP 800-57 Part 1 Rev. 4 [Superseded]; NISTIR 7621 Rev. 1 from NIST SP 800-57 Part 1 Rev. 3; NIST SP 800-57 Part 1 Rev. 3 [Superseded]",
    "CNSSI 4009-2015 from NSA/CSS Manual Number 3-16 (COMSEC)",
    "NIST SP 800-133 [Superseded]",
    "NIST SP 800-57 Part 2 [Superseded]",
    "NIST SP 800-63-3 [Superseded]",
    "NIST SP 800-57 Part 2 Rev.1",
    "NIST SP 800-133 Rev.1 [Superseded]",
    "NIST SP 800-57 Part 1 Rev. 5",
    "NIST SP 800-133 Rev. 2",
    "NISTIR 5153 from ISO DIS 10181-2",
    "NISTIR 8040 from NIST SP 800-63-3",
    "NIST SP 800-63-2 [Superseded]",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/memorized-secret/"
}