Mitigation (Actions to reduce risk)

Question 1

HMAC OTP (Hashed Message Authentication Code - OTP)

Answer 1

A one-time password based on hashing a secret key.

Secure Hash Code

Question 2

OAuth (Open Authorization)

Answer 2

Allows third-party apps to access user information without passwords.

Access Without Passwords