<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":null,"gaps":[],"covered":[],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/definitions/psd2/strong-customer-authentication","url":"https://www.headlesslaw.com/definitions/psd2/strong-customer-authentication","title":"strong customer authentication","family":"definition","work_id":null,"status":"in_force","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"PSD2 Article 4, point (30) · Consolidated version of 17 January 2025","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117","valid_from":null,"valid_until":null,"revision":null,"content_id":null,"change_date":null,"nearest_versions":[],"first_text_date":null,"correction_applies":false,"versions":[],"version_url":null,"revision_url":null,"versions_url":null,"relations_url":null,"source_line":null,"attribution":null}} -->
---
title: "strong customer authentication"
type: definition
status: Published
source: "PSD2 Article 4, point (30)"
defined_term: "strong customer authentication"
source_regulation: "PSD2"
source_reference: "Article 4, point (30)"
source_node: "eu.psd2.article.4.subparagraph.1.point.30"
cross_regime_auto_link: false
inline_links: pending
text_version: "Consolidated version of 17 January 2025"
source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117"
check_status: matched
verified: true
last_checked: 2026-10-26
---

*In force · PSD2 Article 4, point (30) · Consolidated version of 17 January 2025 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117)*

## Definition

> **(30)** ‘**strong customer authentication**’ means an authentication based on the use of two or more elements categorised as knowledge (something only the user knows), possession (something only the user possesses) and inherence (something the user is) that are independent, in that the breach of one does not compromise the reliability of the others, and is designed in such a way as to protect the confidentiality of the authentication data;

## Source

[PSD2, Article 4, point (30)](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117).