⚖️
Risk‑Based Authentication
Authentication
Authentication control using risk scoring from contextual signals to trigger step-up verification or blocking.
Definition
Computes a risk score using signals like device history, IP reputation, and behavior. Privacy-friendly designs avoid sensitive tracking and limit retention.
In plain English
Authentication control using risk scoring from contextual signals to trigger step-up verification or blocking.
Why this matters
Why it matters: Reduces account takeover; poor designs can create opaque tracking and unfair false positives.
Example
Example: Use transparent policies, minimize data, and provide recovery when legitimate users are blocked.