Editing Extensible Authentication Protocol (section)

===EAP Password (EAP-PWD)===
EAP Password (EAP-PWD), defined in {{IETF RFC|5931}}, is an EAP method which uses a shared password for authentication. The password may be a low-entropy one and may be drawn from some set of possible passwords, like a dictionary, which is available to an attacker.  The underlying key exchange is resistant to active attack, passive attack, and dictionary attack.

EAP-PWD is in the base of Android 4.0 (ICS). It is in FreeRADIUS<ref>[http://code.metager.de/source/xref/freeradius/server/src/modules/rlm_eap/types/ FreeRADIUS EAP module rlm_eap_pwd]</ref> and Radiator<ref>{{cite mailing list|url=http://www.open.com.au/pipermail/radiator-announce/2012-June/000018.html|title=Added support for EAP-PWD per RFC 5931|first=Mike|last=McCauley|mailing-list=radiator-announce}}</ref> RADIUS servers, and it is in hostapd and wpa_supplicant.<ref>[http://community.arubanetworks.com/t5/Technology-Blog/Secure-authentication-with-only-a-password/ba-p/36524 Secure-authentication with only a password]</ref>

{{anchor|EAP-TTLS}}