Glossary · Security

PAM

Pluggable Authentication Modules

In plain language

A building-block system on Linux and Unix computers that lets sign-in methods be swapped in and out.

The metaphor

Like a door frame with a standard slot: you can fit a key lock, a keypad or a fingerprint reader without rebuilding the wall.

Going deeper

How it works

Programs ask this layer to check who is signing in.
Administrators configure which checks it uses, such as passwords, codes or tokens.
Changing the method needs no change to the programs themselves.
It is found mainly on Linux servers and some network equipment.

In practice

A Linux server asks for a password plus a one-time code at login.
An admin switches a server from local passwords to company accounts.
A security audit lists the sign-in modules in use on a server.

A question owners ask

Is this the same as Privileged Access Management?

No. They share the abbreviation. This one is a Linux sign-in framework. The other is about controlling and recording the use of administrator accounts.

Related terms

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →