The process of showing that evidence is what it purports to be. In digital investigations, authentication can involve hashes, provider certifications, metadata consistency, device context, witness testimony, and explanation of collection and analysis methods.