Multi-Factor Authentication (MFA), also known as Two-Factor Authentication (2FA) or Two-Step Verification, is a security method that requires users to provide multiple forms of verification before granting access to an account or system. MFA enhances security by adding an extra layer of protection beyond the traditional username and password. Here’s how MFA typically works:
Username and Password: Users begin the login process by entering their username and password, as they would with single-factor authentication.
Additional Verification: After the initial login, users are prompted to provide one or more additional forms of verification, typically falling into one of these categories:
- Something You KnowThis is the traditional username and password. It’s considered the first factor.
- Something You HaveUsers must possess a physical item or device to complete the authentication. Common examples include:
- Smartphones or Tokens: A unique code is generated on the user’s smartphone or a physical hardware token, which they enter during login.
- Smart CardsA physical card with an embedded chip that must be inserted into a card reader.
- FingerprintUsers provide a fingerprint scan for authentication.
- Facial RecognitionUsers’ faces are scanned and compared to stored biometric data.
- Iris ScanThe unique pattern of the user’s iris is used for authentication.
- Users are only allowed to log in from specific IP addresses or geographic locations.
Authentication: Once the additional verification is provided, the system verifies that the information matches what’s on record. If all factors align, access is granted.
The main advantage of MFA is that it significantly enhances security. Even if a malicious actor obtains a user’s password, they would still need the additional factor (such as a smartphone or biometric data) to gain access, making unauthorized access much more difficult.
MFA is widely used in various applications, including online accounts (e.g., email, social media), financial institutions, government systems, and corporate networks. Its adoption is recommended as a best practice for enhancing cybersecurity and protecting sensitive information from unauthorized access and data breaches.
Key terms in plain language
Open a term for a concise explanation of language used on this page.
Fiber Internet
Internet delivered through strands of glass using light. Fiber commonly supports high capacity, low latency, and strong upload performance, but availability must be confirmed for the exact address.
Cybersecurity
The practices and controls used to protect identities, devices, networks, applications, and data from unauthorized access, disruption, or manipulation.
Multi-Factor Authentication (MFA)
A login control requiring more than one form of verification, such as a password plus an authenticator app, security key, or biometric factor.
Zero Trust
A security model that does not automatically trust a user or device because of its location. Access is continuously verified and limited to what is necessary.
SASE
Secure Access Service Edge combines networking and security capabilities in a cloud-delivered architecture so users and locations can receive consistent policy wherever they connect.
Identity and Access Management (IAM)
The systems and policies that determine who a user is, what resources they may access, and how that access is authenticated and reviewed.