While basic authentication is fine for development, you should use AAD authentication in a live environment.
You can read more about using Postman with AAD authentication on Microsoft Docs at https://docs.microsoft.com/en-us/dynamics365/business-central/dev-itpro/developer/devenv-develop-connect-apps#exploring-the-apis-with-postman-and-aad-authentication.