---
title: "Authentication: backend and frontend users"
manual: "TYPO3 Explained"
version: "main"
permalink: "https://docs.typo3.org/permalink/t3coreapi:authentication@main"
source: "ApiOverview/Authentication/Index.rst"
modified: "2026-09-14T11:10:56+00:00"
---

# Authentication: backend and frontend users

In TYPO3, there are two distinct user types:

**[Backend user](https://docs.typo3.org/permalink/t3coreapi:backend-user-api@main)**

These users can log into the TYPO3 backend to manage content and configure
settings based on their assigned permissions.

**[Frontend user](https://docs.typo3.org/permalink/t3coreapi:frontend-user-api@main)**

These users can log into the TYPO3 frontend to access restricted content
that is not publicly available.

The following topics are of interest when you are working with backend or
frontend users in TYPO3:

**[Authentication services](https://docs.typo3.org/permalink/t3coreapi:authentication-service@main)**

Authentication services in TYPO3 manage user verification, allowing
flexible and customizable login methods for secure access control.

**[Password policies](https://docs.typo3.org/permalink/t3coreapi:password-policies)**

The password policy validator is used to validate passwords against
configurable password policies.

**[Sessions](https://docs.typo3.org/permalink/t3coreapi:sessions)**

The user session contains all  information for logged in backend and
frontend users, as well as anonymous visitors without login. It can be
used to store session data like a shopping basket.

**[Multi-factor authentication](https://docs.typo3.org/permalink/t3coreapi:multi-factor-authentication@main)**

Enhance your TYPO3 security with Multi-Factor Authentication (MFA),
adding an extra layer of protection beyond passwords for safer logins.