To authenticate a user's identity with this method, a user accessing an electronic application is asked to enter his or her name, or other user identifier, and a password or PIN. The password or PIN is known both to the user and to the electronic system, but to no one else.