Confirmation that a human physically interacted with an authenticator, typically by touching a button. Weaker than user verification but prevents remote attacks.