Cybersecurity

What is Authentication?

Quick answer

The process of verifying that a user, device, or system is who or what it claims to be.

Authentication, explained

Authentication answers the question: who are you? It is different from authorization, which decides what an authenticated user is allowed to do. Common authentication factors fall into three groups: something you know (a password or PIN), something you have (a phone or hardware key), and something you are (a fingerprint or face).

Because passwords are often reused or stolen, many services now combine factors through multi-factor authentication or replace passwords with passkeys based on public-key cryptography. Systems also authenticate each other, for example when a server presents a certificate during a TLS handshake. Strong authentication is one of the most effective defenses against account takeover and is a core pillar of zero trust security.

Related terms

Guides that mention Authentication