Identity-proofing is the process of confirming that a digital account belongs to a real person. It is a stronger check than simply asking for a password or email address, because those credentials can be stolen, reused, or bought. In practice, identity-proofing may use document checks, phone or email confirmation, device signals, liveness tests, or selfie-video verification to link an account to a living user.
This matters in cyber security because many attacks depend on fake identities. Fraudsters create impersonation accounts, bypass onboarding controls, or use stolen personal data to pass weak verification steps. Good identity-proofing raises the cost of these attacks, but it is not perfect: replayed video, deepfakes, synthetic identities, and social-engineering tricks can still defeat poor implementations. Defenders treat identity-proofing as one layer in a larger trust model, backed by account monitoring, step-up authentication, and careful handling of sensitive verification data.