Which authentication method is required for patient pick-up kiosks?

• A. Password only
• B. Two-factor authentication
• C. Biometric only
• D. No authentication

Answer: (B)

Two-factor authentication is the practice of requiring two different kinds of evidence to verify identity. For patient pick-up kiosks, this layered approach helps prevent unauthorized access if one credential is compromised, which is crucial to protect PHI and ensure the right patient retrieves medications. Typically this means something the patient knows (a password or PIN) plus something they have (a code from a mobile device or a hardware token) or, in some setups, a biometric factor used in combination with a second factor. A password alone can be stolen or guessed, biometric-only can raise privacy and practicality concerns, and no authentication would allow anyone to pick up items discretionlessly. The added assurance of two distinct factors makes it the most secure and appropriate choice for these kiosks.