# Basic question about authentication

**URL:** <https://forum.solidproject.org/t/basic-question-about-authentication/642>\
**Category:** Solid: The Basics\
**Created:** [November 21, 2018, 9:34am UTC](https://forum.solidproject.org/t/basic-question-about-authentication/642 "2018-11-21T09:34:19Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![gandalfprime](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/gandalfprime/32/62_2.png) [@gandalfprime](https://forum.solidproject.org/u/gandalfprime)\
**Post date:** [November 24, 2018, 9:50am UTC](https://forum.solidproject.org/t/basic-question-about-authentication/642/12 "2018-11-24T09:50:54Z")

</div>

> [@hiraeth](#):
>
> My question is how would one “log in” to their PODs? Assuming it’s a username/password system, where would the usernames/passwords be stored? If it’s stored on a central server isn’t that counterproductive…?

Cit. @hiraeth in this topic on this forum.

From the users' viewpoint, PODS is indeed—in your wording—a username/password system, since both hosted users and owners do access it via username and password, though not so do authorized applications. Usernames and corresponding (hashed) passwords are stored where they belong—in the one and the only one appropriate PODS instance. There is no central server by design there.

The [aforementioned](http://forum.solidproject.org/t/basic-question-about-authentication/642/11) dedicated built-in authentication mechanism on principle could additionally be involved in accessing all data stored in a PODS instance to make sure that all users' data (user's WebID profiles) get authorized access. However, the implementation of this—insofar as apparent—currently is undocumented and at least testing the installation of Node Solid Server (NSS) 4.2.0-rc.0 as a PODS instance fails locally yet, cf. [Fig.0b](https://nssforum.durdik.ch/#Fig.0b) presented on an intermittently with intermediate interruptions, as a general rule between 20:00 and 07:00 GMT/UTC o'clock, and temporarily operated web server. Additionally, there is a currently unresolved [symptom](http://forum.solidproject.org/t/setting-up-a-solid-server-on-a-windows-machine/112/13), which hedges about the scope of the aforementioned built-in authentication mechanism.

Take note of the fact that references (links) to the temporarily operated web server still may shift over time.

---

_[View the full topic](https://forum.solidproject.org/t/basic-question-about-authentication/642)._