Website authentication systems are built to assume that anyone with the password is guaranteed to be the “authentic” user. Authenticator provides a six digit one-time password which users must provide in addition to their username and password to log into their account.