Some systems authenticate users who forgot their password, especially in the context of a self-service password reset (self-service-reset), by asking the user to type answers to one or more personal questions. What the user types at the time of authentication is compared against data stored about the user -- an Authentication Profile.

An Authentication Management system may manage Authentication Profile data.

Return to IT Security Concepts