Security

Single-Factor Authentication

Single-factor authentication is a login that relies on one proof of identity, usually a password. If that one secret is stolen, an attacker can authenticate fully. MITRE tracks the weakness as CWE-308.

Deep dive

Learn Article

What Is CWE-308? Single-Factor Authentication Explained

CWE-308 single-factor authentication means one secret is enough to log in where more factors are needed. Learn where it hides and how to fix it.

beginner 5 min read

Back to glossary