Proving who a user is — usually an email and password, or a "log in with Google" button. It's how your app knows which account someone is using.