Password authentication
Password authentication is an authentication method that verifies a claimed identity or access by checking a supplied secret password or passphrase.
Practical Automation with PowerShell: Effective scripting from the console to the cloud
A password is a secret character sequence used to authenticate an identity or authorize access to systems.
- How it is used
- Protects identities, vaults, and automation connections while framing credential handling as an operational security task.
- How deep it goes
- Explains storage hazards and vault configuration, including unattended execution tradeoffs, but does not detail password-generation or cryptographic internals.
- Examples
- Uses a plaintext SolarWinds password, a SQL health check, and SecretStore password prompts to illustrate risk and configuration choices.
- What you can do after
- Operate/configure SecretStore for unattended automation while keeping passwords outside scripts and securing the hosting account and machine.
The Well-Grounded Python Developer: How the pros use Python and Flask
A password is a secret character sequence used to authenticate an account or system identity.
- How it is used
- Authenticates users through an email/password login and distinguishes their stored passwords from credentials the application uses for external services.
- How deep it goes
- Traces the login request workflow and explains why passwords are hashed, without detailing bcrypt's algorithm.
- Examples
- Uses an email/password login flow, a User model with a hashed-password field, and SMTP server credentials.
- What you can do after
- Apply it via Flask-Login and Flask-Bcrypt to support user login, protected endpoints, and hashed password storage.
Learn AI-Assisted Python Programming, Second Edition
A password is a secret character sequence used to authenticate a user or protect access to an account or system.
- How it is used
- Uses password rules to teach Boolean-returning Python functions, testing, and debugging with an approachable authentication example.
- How deep it goes
- Defines progressively stricter checks and demonstrates implementations, tests, and an import failure, but stops short of real-world password security.
- Examples
- Tests password, qwerty, Leo, N3w Y0rk J375, and N3w Y0rk J375$ against changing validation rules.
- What you can do after
- Build and debug Python password validators that return Boolean results and verify them with test calls.
Read how Learn AI-Assisted Python Programming, Second Edition explains password authentication →
Real-World Cryptography
A password is a human-chosen secret used to authenticate a person or derive authentication and cryptographic keying material.
- How it is used
- Uses passwords to authenticate people and establish mutual trust over an already secured connection.
- How deep it goes
- Explains password risks and alternatives, but stops short of password-storage implementation and account-recovery design.
- Examples
- Uses website registration, repeated passwords, database breaches, password managers, and Facebook- or Google-based SSO examples.
- What you can do after
- Evaluate password risks and choose between password managers, SSO, PAKEs, OTPs, and FIDO2-based authentication.
Read how Real-World Cryptography explains password authentication →
Tiny Python Projects: Learn coding and testing with puzzles and games
A password is a secret string of characters used to authenticate a user or protect access to an account or service.
- How it is used
- Uses random word combinations to generate passwords that are more memorable than arbitrary character strings.
- How deep it goes
- Builds a runnable Python generator with filtering, sampling, reproducibility, transformation, and testing, but defers broader password-storage practices.
- Examples
- Demonstrates word-list, Constitution, novel, poetry, noun, verb, adjective, seeded, and l33t-generated passwords.
- What you can do after
- Builds a Python command-line tool that generates configurable, memorable passwords from one or more input files.
Software Security for Developers
A password is a secret character sequence used to authenticate a user or control access to an account or service.
- How it is used
- Explains how applications authenticate users and why password-based access creates security and usability responsibilities.
- How deep it goes
- Defines password login, details weakness, reuse, and storage risks, then stops short of password-storage implementation.
- Examples
- Uses login forms, reused credentials after a service breach, password storage failures, WebAuthn keys, and expiring OTPs.
- What you can do after
- Evaluate password authentication and choose SSO, WebAuthn, or OTP alternatives when reducing storage and reuse risks.
Read how Software Security for Developers explains password authentication →
Grokking Web Application Security
A password is a secret string of characters used to authenticate a user or authorize access to a system.
- How it is used
- Protects web-application credentials from database theft and account compromise.
- How deep it goes
- Explains hash-based storage and verification, then identifies brute-force and breach-response risks without detailing multifactor authentication.
- Examples
- Illustrates bcrypt salt generation and hash comparison, plus attackers testing stolen username-and-password wordlists.
- What you can do after
- Apply it via bcrypt-style hashing to store and verify passwords without retaining plain text.
Read how Grokking Web Application Security explains password authentication →
Road to Kubernetes
A password is a secret authentication credential used to verify a user's identity.
- How it is used
- Supports authenticating a user while connecting to a remote server through SSH.
- How deep it goes
- Defines passwords as SSH credentials and identifies their login role, but does not explain storage, policy, or password management.
- Examples
- Uses a root password with the `ssh root@172.104.195.109` command and a first-connection host-authenticity confirmation.
- What you can do after
- Apply it via SSH to authenticate as root when connecting to the specified remote virtual machine.
Read how Road to Kubernetes explains password authentication →
Authorization in Action
A password is a secret sequence of characters used to authenticate a person or account.
- How it is used
- Frames passwords as a baseline authentication method for comparing security, usability, and attack exposure.
- How deep it goes
- Compares password weaknesses with alternative methods but does not provide password policy or implementation procedures.
- Examples
- Uses credential stuffing, SMS codes, authentication-app codes, push notifications, passkeys, and PKI as comparison points.
- What you can do after
- Evaluate password authentication against stronger methods using security, usability, phishing resistance, and recovery considerations.
Read how Authorization in Action explains password authentication →
Related concepts
- sensitive informationkind of · Sensitive information is information requiring protection because its unauthorized access, disclosure, alteration, or misuse could cause harm or violate obligations.
- credential rotationused by · Credential rotation is the periodic or event-triggered replacement of authentication credentials or secrets to limit exposure and satisfy security requirements.
- SSH keyalternative to · An SSH key is a cryptographic public–private key pair used to authenticate a user or client to Secure Shell services and related systems.
- multifactor authenticationalternative to · Multifactor authentication is an authentication method that verifies identity using evidence from at least two distinct authentication-factor categories.
- one-time codecontrasts with · A one-time code is a temporary authentication credential accepted for a single attempt or operation, or during a limited validity period.
- administratorused by · An administrator is a user, account, role, or process granted elevated permissions to manage a system, application, or its resources and settings.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.