Authentication

The process of verifying that a person, device or system is who or what it claims to be before granting access, for example with a password, code or fingerprint.

Authentication answers the question "Are you really who you say you are?" It usually relies on one or more factors: something you know (a password or PIN), something you have (a phone, security key or smart card) and something you are (a fingerprint or face scan). Authentication is different from authorization, which decides what you are allowed to do after you have proven your identity.

Weak authentication is behind a large share of business breaches. Reused or guessable passwords, shared logins and accounts without multi-factor authentication make it easy for attackers to walk in through the front door. For an Alberta business holding client personal information, strong authentication is one of the most effective and affordable safeguards available.

Practical tip: turn on multi-factor authentication for email, remote access, banking and any system holding sensitive data. Where possible, prefer authenticator apps or physical security keys over text-message codes, and give each person their own login rather than sharing accounts.