How does the TeamSpeak 3 user Authentication work?

Rather than using usernames and a passwords, TeamSpeak 3 uses asymetric cryptography for user authentication. This greatly adds to the security of TeamSpeak 3 servers, reducing the potential risk Server Admins with weak passwords could cause.

Upon installing the TeamSpeak 3 client, an identity file is generated locally. This file consists of two cryptographical keys: A public key and a private key. When a client connects to a server, it will present its public key which will be used by the server to send an encrypted reply to the client. To authenticate, the client needs to decrypt the reply, which requires the private key.

TeamSpeak 3 servers recognize clients by the public component of their identities. All server groups, permissions, offline messages etc. are stored on the server and will be assigned to clients upon authenticating.

We advise you to back-up of your identity to an external device for safe keeping. This can be done by opening up the Identities Options by clicking at Settings, Identities, Export. Similarly, previously exported identities can be imported. Anyone who has this file can impersonate you and will gain all of your permissions so make sure only YOU have access to your identity file. 

You can also generate additional or delete existing identities in the Identities settings in the TeamSpeak client.