Auth icons

The 73 auth icons in Security, described

Access deniedaccess-deny

Access denied — you may not come through, permission refused.

Access grantedaccess-grant

Access granted — you may come through, permission allowed and the door open.

Authenticationauth

Authentication — proving who you are with a login, a key or an identity provider.

Biometricbiometric

Biometric — proving it is you by what you are, a fingerprint or a face.

Break glassbreak-glass

Break glass — the emergency access you hope stays sealed until it is truly needed.

Data residencydata-residency

Data residency — the data lives in this region by law and may not leave it.

Dormant keydormant-key

An upright key, a Z in its bow — a credential that has not been used in a long time.

Face IDface-id

Face ID — your face is the key, biometric unlock by scanning who you are.

Geo keygeo-key

A location pin with a key in its head — a credential that only works from one place.

Geofencegeofence

A location pin beside a shield — access allowed only inside a geographic boundary.

Grantgrant

An upright key, a plus in its bow — grant a permission or a new scope.

ID cardid-card

A card with a person and their details — an identity card or service account.

Identityidentity

Identity — who somebody is, their profile and details on an ID card.

Just-in-time accessjust-in-time-access

Just-in-time access — the key exists only for the hour it is needed.

Key alertkey-alert

An upright key, an alert in its bow — a credential that needs attention.

Key blockedkey-blocked

An upright key, a stop square in its bow — a credential blocked from any further use.

Key checkpointkey-checkpoint

An upright key, a flag in its bow — the point at which a credential is checked.

Key eventkey-event

An upright key, a bolt in its bow — a credential used, created or revoked.

Key filterkey-filter

An upright key, a funnel in its bow — filter records by which credential was used.

Key listkey-list

An upright key, list rows in its bow — the credentials issued to an account.

Key lookupkey-lookup

A magnifying glass with a key inside — look up which credential this is.

Key revokedkey-revoked

An upright key, an X in its bow — a credential that has been revoked.

Key runkey-run

An upright key, a play triangle in its bow — a run started with a specific credential.

Key sharekey-share

An upright key, an arrow in its bow — share a credential with someone else.

Key shieldkey-shield

A shield with a key inside — a credential kept under protection.

Key tagkey-tag

A label with a key inside — a named credential you can tell apart from the rest.

Key upgradekey-upgrade

An upright key, a double chevron rising in its bow — a credential promoted to a higher scope.

Key usagekey-usage

An upright key, a rising line in its bow — how much a credential is being used.

Key vaultkey-vault

The vault door with a key inside — credentials kept locked away.

Key verifiedkey-verified

An upright key, a check in its bow — a credential that has been verified.

Least privilegeleast-privilege

An upright key, a minus in its bow — grant only the access a task needs.

Legal holdlegal-hold

A legal hold — nothing here may be deleted, frozen by court order.

Lock alertlock-alert

A padlock with an alert on its body — a lock that needs attention.

Locked filterlocked-filter

A padlock with a funnel on its body — a filter that users cannot remove or change.

Locked goallocked-goal

A trophy with a padlock in its bowl — a goal that cannot be changed once set.

Locked listlocked-list

A padlock beside a list — a list only some people may see or change.

Locked triggerlocked-trigger

A padlock with a bolt on its body — a trigger only the right people can fire.

Log inlogin

Log in — come in, sign in with your credentials and arrive at your account.

Log outlogout

Log out — leave, sign out of your account and end the session.

Multi-factormfa

Multi-factor authentication — two proofs instead of one, a second factor on a device.

MFA pushmfa-push

MFA push — approve the sign-in on the phone in your hand as the second factor.

OAuthoauth

OAuth — somebody else's key lent to you, a delegated grant of access.

One-time passwordotp

A one-time password — a six-digit code that works once and then expires.

Passkeypasskey

A passkey — the device itself is the key, passwordless sign-in with WebAuthn.

Permissionpermission

Permission — you are allowed to do this, access granted by a policy.

Grant permissionpermission-grant

Grant permission — from now on you may, access allowed and approved.

Policy labelpolicy-label

A label with a shield inside — a tag that carries a security policy with it.

Policy listpolicy-list

A shield beside a list — the policies and rules that apply to this resource.

Policy scopepolicy-scope

A shield held between brackets — the scope a policy applies to.

Private bookmarkprivate-bookmark

A bookmark with a padlock inside — a bookmark hidden from everyone but you.

Private searchprivate-search

A magnifying glass with a padlock inside — a search nobody else can see.

Privilege escalationprivilege-escalation

An upright key, an arrow climbing in its bow — privileges escalating beyond what was granted.

Protected checkpointprotected-checkpoint

A flag flown big, a shield on its banner — a checkpoint that cannot be tampered with.

Protected goalprotected-goal

A shield with a flag inside — a goal guarded from interference or tampering.

Role-based accessrbac

Role-based access control — what a kind of person may do, granted by role.

Remove lockremove-lock

A padlock with a minus on its body — take a lock off and release it.

Remove policyremove-policy

A policy sheet with a minus — take a policy away from the set.

Rolerole

A role — what this person or account is here to do, a badge that carries permissions.

Saved keysaved-key

An upright key, a bookmark in its bow — a credential kept for reuse in future runs.

Scoped tokenscoped-token

A token pill held between brackets — an access token limited to one scope.

Secret blocksecret-block

A key held between brackets — a secret kept inside a code block.

Service accountservice-account

A service account — a user that is a program, a machine identity for automation.

Sessionsession

A session — signed in for now, an active window of use until you leave.

Session tokensession-token

A session token — the opaque bearer or cookie that proves it is still you.

Short-lived tokenshort-lived-token

A short-lived token — good for minutes on purpose, then it expires.

Single sign-onsso

Single sign-on — one key that opens every door, federated login.

Time locktime-lock

A timer dial with a shield on its face — access that only opens during a window.

Token authtoken-auth

Token auth — the bearer string in a header that vouches for you.

Token expirytoken-expiry

A key with a clock in its head — a credential that expires after a while.

Unlockunlock

Unlock — it is open, access granted and the lock released for you.

User consentuser-consent

User consent — asked first, and the person said yes before anything happened.

Vaultvault-secret

A vault — behind the dial, the secrets and keys that matter most.

Window lockwindow-lock

A window with a padlock inside — a page that requires sign-in.

In code, each is one import — import { AccessDeny } from "@iconmind/react/icons/access-deny" — and the same name in Vue, Svelte, Solid, Preact, React Native, Astro, Blade and Flutter.

Narrow it by tag