Module 3~9 min
Authentication and Authorization
These two terms sound similar but mean different things: one confirms who you are, and the other decides what you're allowed to do.
What You'll Learn
- What authentication means
- What authorization means
- How the two work together
Authentication: Proving Identity
Authentication is the process of confirming that someone is who they claim to be, typically through a password, a fingerprint, or another credential.
Authorization: Granting Access
Authorization happens after authentication, determining exactly what an authenticated user is allowed to do or access.
Example
Logging into an email account is authentication; being allowed to read your own inbox but not someone else's is authorization.
Key Concepts
AuthenticationAuthorizationCredentials
Key Takeaways
- Authentication confirms who someone is
- Authorization determines what an authenticated user can do
- Both work together to control access to systems
Knowledge Check
What does authorization determine?