A method for verifying the identity comprises the steps as follows: a server receiving a business process request transmitted by a user terminal, wherein the business process request comprises an account number of the user terminal, and business identification corresponding to the business; obtaining biological status information of a user who uses the user terminal in a current time unit according to the account number of the user terminal, and analyzing an active state of the user according to the biological status information of the user in current time unit; determining that the user passes authentication when the active state of the user is a preset active state, and processing corresponding business according to the business identification, otherwise, determining that the user does not pass the authentication, and rejecting the processing of business corresponding to the business identification. In addition, the invention further provides a device for verifying the identity. The method and the device for verifying the identity could improve convenience and safety of the authentication.