Password-Authenticated Key Exchange (PAKE) lets users with passwords exchange a cryptographic key. There have been two variants of PAKE which make it more applicable to real-world scenarios:
Asymmetric PAKE (aPAKE), which aims at protecting a client’s password even if the authentication server is untrusted, and
Fuzzy PAKE (fPAKE), which enables key agreement even if passwords of users are noisy, but “close enough”.