A password is a secret. 

A password is a secret. 

A password is a secret set of characters. 
People have used secrets for a very long time. Ancient Roman soldiers used them to guard areas. They even used wooden tablets to pass words along. In wars, soldiers used a challenge and a response. One soldier would say a word, and another would answer. This proved they were on the same side.
Today, we use passwords for many things. You might use one for your phone or email. 
A password is a secret piece of data used to prove who you are. It is usually a string of characters like letters, numbers, or symbols. If a secret uses only numbers, it is called a PIN. Sometimes, people use a passphrase, which is a long string of words separated by spaces. Passphrases are often safer because they are longer. 
Using passwords works through a specific set of steps. First, the verifier asks for the secret through an authentication protocol. This is just a formal way of saying the system asks for the password. Next, the claimant provides the characters they have memorized. The verifier then checks these characters against the stored secret. If they match, the person is allowed in. To keep things private, many computers hide the characters as you type them. This prevents people nearby from seeing your secret. 
People have used secrets to guard places since ancient times. In the Roman military, soldiers used watchwords to secure their camps. A man would receive a wooden tablet with a word written on it. He would then pass that tablet and the word to the next group of soldiers. This continued until the tablet returned to the leader. During the Battle of Normandy, U.S. paratroopers used a challenge and response. One soldier would say "flash" and the other would answer "thunder." They even used a small device called a "cricket" that made clicking sounds to identify each other.
Computers began using passwords in 1961 at MIT. This was part of a system called the Compatible Time-Sharing System, or CTSS. In the early 1970s, Robert Morris improved how computers stored these secrets. He created a way to store them in a hashed form for the Unix operating system. This method first appeared in the 6th Edition of Unix in 1974. His system used a special math tool to make the secrets harder to steal. This helped protect the computer from people trying to guess the login details.
Today, we use passwords for almost everything digital. You might use them for your phone, email, or even a cable TV decoder. Because people have so many accounts, they often have about 100 different passwords. This makes it hard to remember them all without help. Some people use a password manager to keep track of their secrets. It is important not to use easy guesses like pet names or birthdays. Google found in 2013 that these are very easy for others to find. Using long, random phrases is a much safer way to stay protected.
A password, also known as a passcode, is a piece of secret data used to confirm a user's identity. It is typically a string of characters, such as letters, digits, or symbols. In technical terms, the person holding the secret is called the claimant. The party checking the identity is known as the verifier. When a claimant uses an authentication protocol to show they know the secret, the verifier can infer who they are. 
The mechanism of authentication involves a specific sequence of steps. First, the verifier requests the secret through an established protocol. The claimant then provides the sequence of characters they have memorized. The verifier compares this input to the stored data. If the characters match, access is granted. To protect privacy, many systems hide the characters as they are typed. This prevents bystanders from seeing the secret through a method called shoulder surfing.
There are different types of secret strings used for security. If the characters are strictly numeric, the secret is called a personal identification number, or PIN. If the secret is a long sequence of words separated by spaces, it is called a passphrase. While similar to a password, a passphrase is generally longer to provide added security. A password does not actually have to be a real word. In fact, using a non-word can make it much harder for someone to guess.
Humans have used passwords for security since ancient times. The Roman military used a system of watchwords to secure their camps. According to the historian Polybius, a man would receive a wooden tablet with a word inscribed on it. He would pass the tablet and the word to the next commander in a chain. Once the tablet returned to the original tribune, the leader knew everyone had received the word. During the Battle of Normandy, U.S. paratroopers used a challenge and response system. A soldier would say "flash," and the correct response was "thunder." They even used a device called a "cricket" that made metallic clicks to identify one another.
In the digital age, passwords became essential for computer security. The first system to use password logins was the Compatible Time-Sharing System (CTSS) at MIT in 1961. In the early 1970s, Robert Morris developed a way to store passwords in a hashed form. This was part of the Unix operating system and appeared in the 6th Edition in 1974. His algorithm used a 12-bit salt and a modified DES algorithm to reduce the risk of dictionary attacks. Today, people use passwords for everything from mobile phones to automated teller machines (ATMs).
Choosing a secure password is a difficult balance for many users. If a password is easy to remember, it might be easy to guess. If it is too complex, users might write it down or reuse it across many accounts. A survey suggested the average user manages around 100 different passwords. Google released a list in 2013 of insecure passwords, such as pet names or birthdays. Using a single dictionary word is also considered weak. Instead, experts suggest using long phrases or combining unrelated words with special characters.
Security systems also use technical methods to stop attackers from guessing. One method is throttling, which imposes a time-out after a few failed attempts. Another method is to disable an account after a specific number of bad guesses. Some systems use key stretching to make the process of checking a password much slower. This makes it harder for an attacker to use high-speed hardware to guess many passwords at once. 
Passwords are connected to broader fields of cybersecurity and identity management. Because memorizing 100 passwords is impractical, many people use password managers. These tools allow a user to remember only one master password. Others use single sign-on systems to manage access to many different services. As technology evolves, the way we protect our digital identities continues to change to meet new threats.
🖼️ Images & Media (2)
More to explore
✨ What else?
Related topics you might enjoy
🔬 Go deeper
More advanced topics to explore
What is Nepedia?
A free, ad-free encyclopedia for children. Every article is written at five reading levels, so the same page works for a five-year-old and a fifteen-year-old — use the level switcher above to see this one change. No account needed to read.