Secure your small business:
Apps → Data →

Shared Secret

A Shared Secret is a static word, phrase, or string of characters agreed upon by two parties in order to confirm identity as a form of knowledge-based authentication (KBA).

Passwords are the most common example of shared secrets; through initial password selection, a system and user "agree" that the next time the user attempts to log in, the system will prompt them for the chosen password and the user will provide it, and that if the user fails to provide it, they will not be logged in.

"Secret questions" commonly seen in two-step authentication, such as "What is your mother's maiden name?" or "What was the name of your first pet?" are also instances of shared secrets frequently used for authentication purposes.

Shared secret authentication is both particularly common and also particularly insecure, as the secrets are static, rather short for very practical reasons, often very easy to either brute force or to guess, and relatively easy to steal or lose, whether through phishing, various forms of snooping or interception, or user carelessness.

2FA/MFA Rapid Reference

Authentication at a glance

Download the 2FA/MFA Rapid Reference now:

  • 2FA and MFA basics and common solutions
  • The benefits and drawbacks of each
  • Glossary of authentication terms

 

2FA/MFA Rapid Reference

  • 2FA and MFA basics and common solutions
  • The benefits and drawbacks of each
  • Glossary of authentication terms
Save PDF  

Downloadable References

PDF
Sample, shareable addition for employee handbook or company policy library to provide governance for employee AI use.
PDF
Generative AI is exploding, but workplace governance is lagging. Use this whitepaper to help implement guardrails.
PDF
Cheat sheet for basics to stay secure, their ideal deployment order, and steps to take in case of a breach.
PDF
Real-time, continuous authentication using behavioral biometrics and machine learning.
 
 
 
 
 

Subscribe to the newsletter for Plurilock and cybersecurity news, articles, and updates.

You're on the list! Keep an eye out for news from Plurilock.