Two-factor authentication based on computation method to derive proxy password

A computer program product (CPP) comprising:

• a set of data storage device(s);
• and
• computer code collectively stored on the set of data storage device(s), with the computer code including data and instructions for causing a processor(s) set to perform the following operations:
• receiving a first password for a first user, with the first password including numbers, alphanumeric characters and/or non-alphanumeric characters,
• receiving a set of operation(s) that can be applied to the first password to change it into a second password for the first user,
• applying, by machine logic, the set of operation(s) to the first password to obtain the second password,
• presenting a user interface to the first user that prompts the user to enter the first and second passwords as a multi-password authentication of the first user to access a first protected resource,
• receiving user input from the first user through the user interface,
• determining whether the user input is the first password or the second password;
• responsive to the determination that the user input is of the first password, receiving another input with the second password;
• responsive to the determination that the user input is of the second password, receiving another input with the first password;
• determining that the user input and the another user input are indicative of a correct entry of the first password and a correct entry of the second password, and
• responsive to the determination that the user input and the another user input are indicative of a correct entry of the first password and a correct entry of the second password, allowing the first user access to a first protected resource.

A system comprising:

• a processor, a computer readable memory, one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions executable to:
• assign a first password precursor to a first user, with the first password precursor including numbers, alphanumeric characters and/or non-alphanumeric characters;
• assign a set of operation(s) that can be applied to the first password precursor to change it into a first password for the first user;
• apply, by machine logic, the set of operation(s) to the first password precursor to obtain the first password,
• wherein the set of operation(s) are selected by the first user during profile creation by a system, and the first password is never stored by the system;
• present a user interface to the first user that prompts the user to enter the first password;
• receive user input from the first user through the user interface;
• determine whether the user input is the first password or the first password precursor;
• responsive to the determination that the user input is of the first password, receiving another input with the first password precursor;
• responsive to the determination that the user input is of the first password precursor, receiving another input with the first password;
• determining that the user input and the another user input are indicative of a correct entry of the first password and a correct entry of the first password precursor;
• and
• responsive to the determination that the user input and the another user input are indicative of a correct entry of the first password and a correct entry of the first password precursor, allowing the first user access to a first protected resource.