What is Weak Authentication?

Authentication is the process of having to prove your identity to an application or system in order to demonstrate that you are who you say you are. Weak Authentication describes when in the strength of the authentication mechanism is relatively weak in comparison to the value of the assets that are being protected. It also describes situations in which an authentication mechanism is flawed or vulnerable. Weak authentication is a way that attackers and malicious insiders can take advantage of unsecured and older operating systems that do not require a password upon login. This applies to phones, tablets, and computers.

Intruders are also able to bypass authentication in operating systems that are configured to bypass the login screen. Once they are able to gain access to the OS, the bad guys are able to find passwords that are already stored on the computer. This method a stepping stone for network-based password attacks as well.