- It manages user permissions
- It prevents DDoS attacks
- If a password is stolen, the account is not compromised
- It encrypts data in transit