Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 17

Which of the following is the weakest authentication mechanism?

A. pass-phrases

B. passwords

C. one-time passwords

D. token devices

Step 1 of 2

Weakest authentication mechanism

Passwords can be insecure, easily broken or inconvenient if the user does not select a strong password because the selection of strong password is truly in the hands of user. So, the password is the weakest authentication mechanism as it’s vulnerable to attacker.

Thus the correct option is B. passwords.