Secret character strings that users present to prove their identity, and the practices for choosing and storing them.