Authentication

Q: What is the difference between authentication and authorization?

Authentication verifies identity, authorization defines access rights. Authentication always comes before authorization.

Q: What is the difference between 2FA and MFA?

2FA uses exactly two factors and is a special case of MFA, which requires two or more independent factors.

Q: Is passwordless sign-in secure?

Yes, passwordless methods such as passkeys are considered particularly secure because there is no password to steal.

Authentication is the process of verifying that a user, device or service really is who it claims to be. It is the foundation of every access control.

What is authentication?

Authentication is the process of verifying an identity: a user, device or service proves it really is who it claims to be. The proof relies on three factor types: knowledge (password, PIN), possession (smartphone, token) and inherence (biometric features such as a fingerprint).

Authentication and authorization

Authentication answers "Who are you?", authorization answers "What are you allowed to access?". The identity is confirmed first, then access control decides the permissions. Together they form a secure login.

Authentication methods at a glance

Single-factor: password only, no longer sufficient today
Two-factor (2FA): password plus a second factor
Multi-factor (MFA): two or more independent factors
Single sign-on (SSO): one login for several services
Passwordless authentication: passkeys or biometrics instead of a password

Why passwords alone are not enough

Most successful attacks on accounts rely on stolen, weak or reused passwords. A second factor cuts this risk sharply, because a stolen password alone is no longer enough.

Secure authentication with SecureCloud

SecureCloud supports multi-factor and passwordless authentication as part of Advanced Access Management, combined with role-based access control. The service is operated in Germany, GDPR-compliant, BSI C5-attested and ISO 27001-certified.

Frequently asked questions

What is the difference between authentication and authorization?

Authentication verifies identity ("Who are you?"), authorization defines access rights ("What may you access?"). Authentication always comes before authorization.

What is the difference between 2FA and MFA?

Two-factor authentication (2FA) uses exactly two factors and is a special case of multi-factor authentication (MFA), which requires two or more independent factors.

Is passwordless sign-in secure?

Yes. Passwordless methods such as passkeys are considered particularly secure because there is no password left to steal or intercept. They rely on possession and biometrics.

Advanced Access Management