confidential authentication information, usually composed of a string of characters