Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Glossary
A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  J  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X  |  Y  |  Z

authenticator

Abbreviations / Acronyms / Synonyms:

multifactor authentication
token
Token

Definitions:

  Something the cardholder possesses and controls (e.g., PIV Card or derived PIV credential) that is used to authenticate the cardholder’s identity.
Sources:
FIPS 201-3 under Authenticator

  Authentication using two or more different factors to achieve authentication. Factors include something you know (e.g., PIN, password); something you have (e.g., cryptographic identification device, token); or something you are (e.g., biometric).
Sources:
CNSSI 4009-2022 under multifactor authentication

  An entity that facilitates authentication of other entities attached to the same LAN using a public key certificate.
Sources:
CNSSI 4009-2022

  

A characteristic of an authentication system or an authenticator that requires more than one distinct authentication factor for successful authentication. MFA can be performed using a single authenticator that provides more than one factor or by a combination of authenticators that provide different factors.

 The three authentication factors are something you know, something you have, and something you are.


Sources:
CNSSI 4009-2022 under multifactor authentication

  Something that the Claimant possesses and controls (typically a key or password) that is used to authenticate the Claimant’s identity.
Sources:
NIST SP 800-12 Rev. 1 under Token

  A portable, user-controlled, physical device (e.g., smart card or memory stick) used to store cryptographic information and possibly also perform cryptographic functions.
Sources:
NIST SP 800-57 Part 2 Rev.1 under Token

  Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity.
Sources:
NIST SP 1800-17b under Authenticator
NIST SP 1800-17c under Authenticator

  See Authenticator
Sources:
NIST SP 1800-17b under Token
NIST SP 1800-17c under Token

  Authentication using two or more factors to achieve authentication. Factors are (i) something you know (e.g., password/personal identification number); (ii) something you have (e.g., cryptographic identification device, token); and (iii) something you are (e.g., biometric).
Sources:
NIST SP 1800-12b under multifactor authentication

  Something that the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity. This was previously referred to as a token.
Sources:
NIST SP 800-53 Rev. 5

  Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity. This was previously referred to as a token.
Sources:
NIST SP 800-171r3

  See authenticator type and multi-factor authenticator.
Sources:
NIST SP 800-63-4 [

  

]

  A physical object a user possesses and controls that is used to authenticate the user’s identity.
Sources:
NISTIR 7711 under Token

  A representation of a particular asset that typically relies on a blockchain or other types of distributed ledgers.
Sources:
NISTIR 8301 under Token from Taxonomic Approach to Blockchain IDMS

  Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity.
Sources:
NIST IR 8523 from NIST SP 800-63-4