Authentication is the process of determining whether someone is a legal user. It is the process of identifying an individual, usually based on a username and password. Authentication merely ensures that the individual is who he or she claims to be, but says nothing about the access rights of the individual. It is used a primary step for file protection from unauthorized users.