Identitetsfaktor

Identitetsfaktor is a term used in Danish and Norwegian to describe an attribute or credential that verifies a person’s identity in a digital system. In practice, it refers to one element in the authentication process and is a key concept in multi-factor authentication (MFA).

Common types of identitetsfaktorer include several categories. Knowledge factors rely on something the user knows, such as a password or PIN. Possession factors are something the user has, such as a hardware token, smart card, or a mobile device with an authentication app. Inherence factors are something the user is, most commonly biometrics like a fingerprint, facial recognition, or voice. Location or behavior factors use contextual data such as IP address, geolocation, or typing patterns to help verify identity.

In authentication workflows, a user may supply a password and then a one-time code from a token, or use a passwordless approach with a cryptographic security key (for example, WebAuthn). MFA improves security by reducing dependence on a single factor and can enable stronger protection against credential theft and phishing.

Design and security considerations for identitetsfaktorer include ensuring factor independence, phishing resistance, reliable enrollment and recovery processes, privacy and data protection, and a good user experience. The choice and combination of factors depend on the risk level and the specific use case, such as access to sensitive systems or financial services.

Standards and evolution: The concept is supported by practical standards and frameworks, including FIDO2/WebAuthn for strong, passwordless authentication and guidelines in NIST SP 800-63 on authentication factors. The term itself is primarily descriptive and language-specific rather than tied to a single universal standard.