{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":null,"gaps":[],"covered":[],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/definitions/psd2/strong-customer-authentication","url":"https://www.headlesslaw.com/definitions/psd2/strong-customer-authentication","title":"strong customer authentication","family":"definition","work_id":null,"status":"in_force","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"PSD2 Article 4, point (30) · Consolidated version of 17 January 2025","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117","valid_from":null,"valid_until":null,"revision":null,"content_id":null,"change_date":null,"nearest_versions":[],"first_text_date":null,"correction_applies":false,"versions":[],"version_url":null,"revision_url":null,"versions_url":null,"relations_url":null,"source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/definitions/psd2/strong-customer-authentication.md","body_sha256":"141557d46fea24b06d3549403ee02ce7286f89d5f6a2018b46ff0df074f800e4"},"units":[],"markdown":"---\ntitle: \"strong customer authentication\"\ntype: definition\nstatus: Published\nsource: \"PSD2 Article 4, point (30)\"\ndefined_term: \"strong customer authentication\"\nsource_regulation: \"PSD2\"\nsource_reference: \"Article 4, point (30)\"\nsource_node: \"eu.psd2.article.4.subparagraph.1.point.30\"\ncross_regime_auto_link: false\ninline_links: pending\ntext_version: \"Consolidated version of 17 January 2025\"\nsource_url: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\n---\n\n*In force · PSD2 Article 4, point (30) · Consolidated version of 17 January 2025 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117)*\n\n## Definition\n\n> **(30)** ‘**strong customer authentication**’ means an authentication based on the use of two or more elements categorised as knowledge (something only the user knows), possession (something only the user possesses) and inherence (something the user is) that are independent, in that the breach of one does not compromise the reliability of the others, and is designed in such a way as to protect the confidentiality of the authentication data;\n\n## Source\n\n[PSD2, Article 4, point (30)](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117).\n"}