Process of verifying that a user or system is who they claim to be.
Authentication verifies identity—confirming that users or systems are who they claim to be. Authentication factors include something you know (passwords), something you have (tokens, phones), and something you are (biometrics). Single-factor authentication uses one factor; multi-factor authentication combines multiple factors for stronger verification. Authentication is the gateway to access—weak authentication enables account takeover and unauthorised access.
Why It Matters
The DSC Perspective:
Authentication is your first line of defence. Weak authentication (passwords alone) is easily compromised. Implement MFA everywhere possible—it blocks most account takeover attacks.