Something the user knows (ID and password); something the user has (such as a smart card, which is a credit card device storing info, or a token, a small electronic device that changes user passwords automatically); or something that is part of the user (such as biometrics, which identify the user based on physical characteristics such as a fingerprint or voice/face recognition