HTTP basic access authentication is a simple challenge and response mechanism with which a server can request authentication information (a user ID and password) from a client. The client passes the authentication information to the server in an Authorization header. The HTTP basic authentication scheme can be considered secure only when the connection between the web client and the server is secure.