thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Wireless & Mobility · Intermediate

Microsoft Challenge Handshake Authentication Protocol version 2 (MSCHAPv2)

A password-based challenge-response protocol commonly used as the inner method of PEAP.

Definition

MSCHAPv2 is weak on its own because captured exchanges can be cracked, so it must be protected inside a TLS tunnel. It integrates easily with Active Directory. Windows Credential Guard blocks MSCHAPv2-based single sign-on, pushing organizations toward EAP-TLS.

Exam tip

Never use MSCHAPv2 without a validated TLS tunnel.

Related terms