>Hi,
>
>In a program that uses Sing-Factor Authentication (user ID and Password) I understand that each ID has to be unique. Does each user Password have to be unique too or duplicates are allowed?
>
>TIA

Forcing pwds to be unique is a weakness, as knowledge about currently active other pwds might be gained by a failed pwd creation attempt.
Not so relevant for online scenarios, but terrible in small office user groups - at least those not routinely sharing their pwds ;-)))

Imagine receiving a "unique-failure" when trying the room number as pwd with only a handful of others in the same room ;-)