SMSAuthenticator is an authentication module for situations where "username and password"-login provide insufficient security. Additional security is achieved by sending keys by SMS to the user's mobile phone. The user must return a correct single-use password within a certain timeframe, in order to be authenticated successfully. Only a GSM device capable of showing SMS messages is required on the user end. SMSAuthenticator is a Java-based web service component, and may be integrated into any application capable of accessing SOAP services. It has a Web-based administration interface for managing user accounts, and also generates pronouncable passwords according to the FIPS 181 standard.