Authentication vs. Authorization

June 2020

Authorization and Authentication. They sound almost the same, they both start with the letters auth and both end with ation. So what's the difference? And how can you remember the difference?


Authentication is the process of verifying the identity of someone or something. If you are logging into a platform, you are authenticating yourself. Commonly with a username and a password, but there are also multi factor authentications, such as using a mobile phone for added security.

How can you remember this? You know the word authentic. You know it means somebody is himself. Then it's easy to remember that authentication means to prove that you are who you claim to be!


The concern of authorization is to check permissions. A system might know who you are, but you still might not be permitted to do something. For example, I might be logged in as into some system, but that still doesn't mean I'm an admin and can call /api/drop-all-tables.

How to remember? This word also appears in common language, for example on signs like "only for authorized personnel". You can also remember that YOU SHALL NOT PASS = You are unauthorized. Gandalf knows who you are, but still thinks it's a bad idea for you to pass!

Dear Devs: You can help Ukraine🇺🇦. I opted for (a) this message and (b) a geo targeted message to Russians coming to this page. If you have a blog, you could do something similar, or you can link to a donations page. If you don't have one, you could think about launching a page with uncensored news and spread it on Russian forums or even Google Review. Or hack some russian servers. Get creative. #StandWithUkraine 🇺🇦
Dear russians🇷🇺. I am a peace loving person from Switzerland🇨🇭. It is without a doubt in my mind, that your president, Vladimir Putin, has started a war that causes death and suffering for Ukrainians🇺🇦 and Russians🇷🇺. Your media is full of lies. Lies about the casualties, about the intentions, about the "Nazi Regime" in Ukraine. Please help to mobilize your people against your leader. I know it's dangerous for you, but it must be done!