Authentication is the process of proving that you are really you when you try to access something. Your email account asks for a password. Your phone asks for your fingerprint. A banking app might send a code to your phone before letting you in. Different methods, same basic job.
Why Authentication Exists
Imagine leaving your front door unlocked all day. Anyone could walk in. Online accounts have the same problem if there’s no way to check who is trying to enter.
Authentication creates that check. Before a system gives you access, it looks for something that proves your identity. Usually, that proof comes from information or a device connected to you.
The Three Main Ways It Works
• Something you know, such as a password, PIN, or security answer. The annoying part is remembering which version you used six months ago.
• Something you have, like your phone or a security key. Losing that device suddenly makes the whole process less convenient.
• Something you are, usually a fingerprint or face scan. It feels quicker because your body becomes part of the login.
Authentication vs Authorisation
These two words get mixed up constantly, and honestly, the distinction is pretty simple once you see it.
Authentication asks, “Who are you?” Authorisation asks, “What are you allowed to do?”
So, you might successfully log into a company system because you’re an employee. That doesn’t automatically mean you can view every salary record inside it. Your identity has been confirmed, but your permissions still decide what you can access.
Why Passwords Aren’t Always Enough
Passwords work. The problem is that people reuse them, forget them, or choose something painfully easy to guess. And once somebody gets hold of one, the account is exposed.
That’s why modern services often add another authentication step. Two-factor authentication is a common example. After entering your password, you might need a code from an authentication app or approval on your phone.
It adds a little friction. I think that’s a fair trade when the account contains something you really don’t want a stranger touching.
Where You’ll See Authentication
You probably use authentication far more often than you notice. Your phone checks you before showing your messages. An online store checks your account before displaying saved details. A work platform confirms your identity before opening company information.
And that’s probably the best kind of authentication. You notice it when something goes wrong, but most of the time it quietly gets out of your way.