thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Possession Factor

Authentication factor based on something the user has, such as a security key, smartphone, or smart card.

Definition

Possession factors prove control of a physical or cryptographic object. Examples include hardware security keys, authenticator apps, smart cards, and OTP tokens. Their strength depends on how well the secret inside the device resists cloning or interception.

Example

A YubiKey inserted into a laptop to complete a login is a possession factor.

Exam tip

An SMS code relies on the phone number, a weak possession factor due to SIM swapping.

Related terms