# Authentication

## OpenGate authentication

The OpenGate REST APIs, and device integration mechanisms are enabled by default on all accounts. You don’t have to do anything to turn on these features. However, JWT ([JSON Web Token](https://jwt.io)) and API keys are mandatory and are used to control the access to the resources via the REST APIs and connectors.

The OpenGate REST APIs allow third-party applications or back-office systems to communicate with OpenGate. All users in your organization can use third-party applications to access your entity's data, such as iPhone apps, Android apps, or network-based communication built onto your server. The OpenGate authentication mechanisms ensure the proper access to the information.

{{% children sort="weight" %}}