Are a username and password sufficient to secure online pharmacy access?

• A. Yes, they are sufficient.
• B. Not enough.
• C. Only when combined with a biometric check.
• D. Only if used with two-factor authentication.

Answer: (B)

Relying on a username and password alone creates a single point of failure. Passwords can be stolen in data breaches, guessed, or captured through phishing, and many people reuse the same password across sites. If attackers obtain those credentials, they can log in without proving who they are. Online pharmacies hold highly sensitive health information, so it’s crucial to add stronger controls. A second factor—such as a one-time code from an authenticator app or SMS, or even biometric verification—greatly reduces the chance of unauthorized access. Because a single credential set leaves the system vulnerable, username and password alone are not enough.