MSCHAP

Microsoft Challenge Handshake Authentication Protocol

In plain language

A Microsoft login method used for some VPNs and Wi-Fi that can be cracked with enough effort.

The metaphor

Like a gate password check where the answer can be worked out by someone who captures the exchange.

Going deeper

How it works

The server sends a challenge and the user answers using their password.
Version 2 is still common in older setups.
The exchange can be captured and cracked offline.
Certificate-based logins are stronger.

What can go wrong (example scenario)

An office's VPN used password-only logins for years. A security review showed an attacker who captured one login exchange could crack weak passwords at leisure.

How WILDCARD handles it

Network covers the managed firewall and switches that sit behind your provider's modem.

In practice

A VPN built years ago uses it.
A security check lists it as a weakness.
A provider moves staff to certificate-based logins.

A question owners ask

What is the fix?

Move to a stronger method, such as certificates or two-factor sign-in, which your IT provider can arrange.

Where WILDCARD handles this

Network

Firewall managed and monitored
Switches kept current
On-prem Active Directory auth

Start with Network

Related terms

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →