# Authentication

Face Compare API v1 uses Basic Authentication with a merchant key.

| Header | Value |
| --- | --- |
| `Authorization` | `Basic <Base64(username:password)>` |
| `Merchant-Key` | Merchant key provided by Privy |
| `Content-Type` | `application/json` |

```http
Authorization: Basic <credentials>
Merchant-Key: <merchant-key>
Content-Type: application/json
```

Keep credentials on your server. Never expose them in browser or mobile
application code.