In the HHS´ Guide to the Technical Safeguards, three options are suggested for authentication methods – a method that requires something only known to the individual (i.e., a password or PIN), that requires something the individual possesses (i.e., a smart card or key), or that requires something unique to the individual (i.e., a fingerprint or iris scan). Therefore, any method that complies with the access control requirements mentioned previously can be used instead of passwords, but in each case the user must be assigned a unique name and/or number.