Authentication is verifying that an individual is who they claim to be. Authentication is typically performed by presenting a username (ID) and at least one private item that only the individual should know, most commonly, a password. The major concern when using passwords to authenticate is password strength. A strong password policy can make it difficult for a malicious user to guess the password.