Who can do what.
AUTHENTICATION
Proving who you are.
AUTHORISATION
What you are permitted to do once authenticated.
TWO-FACTOR AUTHENTICATION
A second step beyond a password.
RECOVERY CODES
Backup codes allowing access if your second factor is unavailable.
Store them separately from the device generating codes.
PASSWORD MANAGER
Software generating and storing unique passwords.
SSH KEY
A cryptographic key pair used instead of a password for server access.
PERMISSIONS
What a user or process is allowed to do.
ROLE
A defined set of permissions.
PRIVILEGE ESCALATION
Gaining more access than intended.
SESSION
An authenticated period of use.
Ending sessions is separate from changing a password.
API KEY
A credential allowing software to access a service.
Treat it as a password.
