Identity Proofing vs Authentication

Identity proofing and authentication are often confused, but they serve different purposes. Understanding the difference helps businesses implement appropriate security measures at each stage of the customer journey. For more insights, check out Why Identity Checking is Important.

What Is Identity Proofing?

Identity proofing establishes who someone is. It typically happens at account creation and involves verifying identity documents, biometric verification, and database checks. The goal is to confirm that the person is who they claim to be. For best practices, see Essential Best Practices for Effective Identity Verification in the UK.

What Is Authentication?

Authentication confirms that a returning user is the same person who previously proved their identity. It happens at login or transaction and uses methods like passwords, biometrics, or security tokens. Understanding these methods can be crucial, especially in light of Risks of Not Doing Thorough Background Checking.

Combining Both

Effective security requires both strong initial identity proofing and robust ongoing authentication. Step-up authentication can also be used for high-risk activities.

Conclusion

Identity proofing and authentication serve different but complementary purposes. Understanding when to apply each helps businesses build appropriate security for their customer journeys.