Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Out of curiosity and interest I was wondering if anyone had come across any web based services which offer users other forms of authentication, other than the standard password or PIN? Or if authentication on the web can even reach beyond these methods?

share|improve this question

closed as too broad by Terry Chia, TildalWave, Adnan, Xander, NULLZ Oct 25 '13 at 14:11

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

1  
Client certificates... –  KristoferA Oct 25 '13 at 1:37

4 Answers 4

Some ways of authentication that you haven't mentioned: third party (login with Facebook, Google) authentication, 2 factor authentication (text message, call to your phone, challenge-response token)

share|improve this answer
    
yeah i suppose text messaging and phone calls can be a form of token based authentication. –  Luke14 Oct 25 '13 at 1:09

My health insurance, bank, and customs websites allow me to login using the Chip and PIN implemented in my national ID card if I have a reader connected to my computer.

Some services in my school's website require a client certificate as a 2nd factor for authentication.

share|improve this answer

There's no shortage of web apps which use something like source IP addresses as "authentication" if you consider that authentication. Try doing a security audit on an internal network for some big companies.. Some of the apps wont work any other way though.

share|improve this answer

We use SSL Client Certs on some Services, but you dont want to do this on "public" sites.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.