> For the complete documentation index, see [llms.txt](https://docs.xft.finance/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.xft.finance/learn/flows/payments/debit-card/authorization.md).

# Authorization

The new Directive defines strong authentication as a set of procedures based on the use of at least two of the following three components:

1. Something only the payer knows: For example, a password, personal identification code (PIN), etc.;
2. Something only the payer possesses: For example, a token, mobile phone, chip card, etc.;
3. Something the person is: For example, a biometric element such as the payer’s fingerprint or voice.

<figure><img src="/files/CiAyY3wLbeKYBg3ikKYv" alt=""><figcaption></figcaption></figure>

***

RESOURCES

<https://www.banque-france.fr/system/files/2023-04/payments_market.pdf>