thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Password Authentication Protocol (PAP)

Legacy PPP authentication protocol that sends usernames and passwords in cleartext.

Definition

PAP performs a simple two-way handshake with no encryption or protection against replay. It should be used only inside an already encrypted tunnel, such as within some EAP-TTLS configurations. It is considered insecure for general use.

Example

A legacy dial-up router configured with PAP exposes its password to anyone sniffing the link.

Exam tip

PAP = cleartext; CHAP = challenge-response hash.

Related terms