a user (can be admin) for example in a website has:
a password that is used for normal and everyday access (not security critical actions).
another password that is used for performing security critical actions.
does this two password design have any advantages so that it is worth implementing?
can it be considered a standard design?
do u know of any better/standard alternative to this design?