Skip to main content

Command Palette

Search for a command to run...

πŸ”‘ Authentication Explained Like You're 5

Published
β€’2 min read
S

Building AI systems and writing about how they actually work. Master of AI @ University of Technology Sydney. Previously B.Tech CS with focus on IoT. I believe the best way to learn is to explain. That's why I'm documenting tech concepts with simple analogies (@sreekarreddy.com). AWS Certified β€’ Azure AI Certified β€’ Neo4j Professional β€’ Google Data Analytics When not coding: exploring Sydney, working on side projects, and teaching tech to anyone who'll listen.

Proving you are who you claim to be

Day 95 of 149

πŸ‘‰ Full deep-dive with code examples


The Bouncer Analogy

A club bouncer checks your ID:

  • You claim to be Alice
  • You show ID proving you're Alice
  • Bouncer lets you in

Authentication verifies identity.


Authentication Factors

FactorTypeExample
Something you knowKnowledgePassword, PIN
Something you havePossessionPhone, YubiKey
Something you areBiometricsFingerprint, face

Multi-Factor Authentication (MFA)

Combining factors = much stronger:

Step 1: Enter password (know)
Step 2: Enter code from phone (have)

Even if attacker knows password, they don't have your phone!


Common Methods

MethodHow It Works
PasswordCheck against stored hash
OAuth/OIDC"Continue with Google" style sign-in
Magic LinkEmail with login link
BiometricsFingerprint/face scan
Hardware KeyPhysical USB device

Authentication vs Authorization

Authentication (AuthN)Authorization (AuthZ)
WHO are you?WHAT can you do?
Verifies identityGrants permissions
LoginAdmin vs user role

First prove who you are, THEN we check what you're allowed to do!


In One Sentence

Authentication verifies you are who you claim to be using passwords, devices, or biometrics.


πŸ”— Enjoying these? Follow for daily ELI5 explanations!

Making complex tech concepts simple, one day at a time.

More from this blog

esreekarreddy

132 posts