A type of attack which involves directly observing the authentication process either in person or remotely (eg. Entering a password over someones shoulder).