Knowledge-based authentication is an identity verification step that asks the user a question to which only they should know the answer. It’s designed to prevent identity theft and other types of third-party fraud by asking questions that are easy for the real consumer and difficult for fraudsters.