Knowledge-based authentication (KBA)
Knowledge-based authentication (KBA) confirms someone's identity by asking questions only that person should be able to answer.
Updated November 5, 2026 · 1 min read
On this page
Two kinds
- Static KBA: answers you set up earlier, like a security question about your first car.
- Dynamic KBA: multiple-choice questions generated on the spot from credit and public records, such as which of these streets you once lived on, usually against a time limit.
Where it shows up
Dynamic KBA is common in banking, credit applications and remote online notarization, where many states require identity proofing, often KBA plus a check of a photo ID, before the notary goes ahead. It's weaker than it once was: data breaches have put many of the answers within reach of fraudsters, so it's usually paired with other checks.
In SignMaster
SignMaster doesn't run KBA. Signers are identified by the email address the link was sent to, and you can add an access code for a second check, either one you share with the signer yourself or one SignMaster emails them. Each step lands on the audit trail.
Questions? Answers.
Is an access code the same as KBA?
No. An access code is a shared secret you pass to the signer, while KBA quizzes them about their own history. A code proves they received it, not who they are.