Password Authentication Protocol, sometimes abbreviated PAP, is a simple authentication protocol used to authenticate a user to a remote access server or Internet service provider (ISP). PAP transmits unencrypted ASCII passwords over the network and is therefore considered insecure.