Kerberos is a network authentication service that works by signing in once using an encrypted password then accessing services using a Kerberos ticket. It can be used for single sign on, is popular in large academic institutions, and is the basis for Windows 2000 Active Domain authentication.