 The token may, for example, be a cryptographic key, that is protected by encrypting it under a password.An impostor must steal the encrypted key and learn the password to use the token.Passwords and PINs are categorized as "something you know" method.