Authentication vs Authorization

Authentication (AuthN) checks who you are: logging in with a password, a one-time code, a fingerprint or a security key proves your identity. Authorization (AuthZ) decides what you are allowed to do once you are known: which pages, files or actions you can access.

Authentication always comes first. For example, logging in to net banking is authentication; being allowed to view only your own accounts, and needing extra approval for large transfers, is authorization. Protocols reflect the split: OpenID Connect handles authentication, while OAuth 2.0 grants authorization to apps.

Brute Force Attack CSP (Content Security Policy)CSRF (Cross-Site Request Forgery)DDoS Attack Digital Signature Encryption End-to-End Encryption (E2EE)Hashing IDS and IPS (Intrusion Detection and Prevention)JWT (JSON Web Token)Malware Man-in-the-Middle (MITM) Attack

Authentication vs Authorization

More in Security