Risk-based authentication (RBA) is an adaptive security method that adjusts the strength of identity verification based on the assessed risk of a login attempt. It evaluates contextual signals such as device, location, network reputation, and behaviour to decide whether to allow access, require step-up factors, or block the request. RBA balances security and usability by escalating friction only when risk is elevated.
Content
- By scoring device, location, and behavioural signals at sign-in, RBA permits low-friction access for trusted contexts and demands additional factors or denies access when anomalies appear. This reduces account takeover risk without burdening every legitimate user with maximal challenges.