A method for authenticating data glasses in a data network , in which: a) a message (RE) is transmitted by the data glasses to an authentication computer of the data network by means of a digital data transmission in the data network ; b) the authentication computer generates a first transaction code (TC) in response to the transmitted message (RE) and transmits it to the data glasses by means of a digital data transmission in the data network ; c) authorization data (AD) of a user (U) in response to a first user operation at a terminal not belonging to the data glasses are read into the data network without participation of the data glasses and are processed by the authentication computer which carries out an authentication of the user (U) based on the authorization data (AD), wherein in the course of the authentication, in addition to the authorization data (AD), it is checked whether a code transmitted during the authentication and displayed on an independent device of the user is entered into the terminal ; d) in case of a successful authentication of the user (U), a second transaction code (TC') is read into the data network in response to a second user operation at the terminal and is provided to the authentication computer ; e) the authentication computer checks whether the second transaction code (TC') matches the first transaction code (TC); f) if the check in step e) shows that the second transaction code (TC') matches the first transaction code (TC), an access authorization (TO) is provided by the authentication computer for the data glasses and stored in the data glasses , the access authorization (TO) enabling the data glasses to access one or more predetermined services (SE) in the data network . a) a message (RE) is transmitted by the data glasses to an authentication computer of the data network by means of a digital data transmission in the data network ; b) the authentication computer generates a first transaction code (TC) in response to the transmitted message (RE) and transmits it to the data glasses by means of a digital data transmission in the data network ; c) authorization data (AD) of a user (U) in response to a first user operation at a terminal not belonging to the data glasses are read into the data network without participation of the data glasses and are processed by the authentication computer which carries out an authentication of the user (U) based on the authorization data (AD), wherein in the course of the authentication, in addition to the authorization data (AD), it is checked whether a code transmitted during the authentication and displayed on an independent device of the user is entered into the terminal ; d) in case of a successful authentication of the user (U), a second transaction code (TC') is read into the data network in response to a second user operation at the terminal and is provided to the authentication computer ; e) the authentication computer checks whether the second transaction code (TC') matches the first transaction code (TC); f) if the check in step e) shows that the second transaction code (TC') matches the first transaction code (TC), an access authorization (TO) is provided by the authentication computer for the data glasses and stored in the data glasses , the access authorization (TO) enabling the data glasses to access one or more predetermined services (SE) in the data network . <EOS>