Skip to main content

Cybersecurity glossary

What is multi-factor authentication?

Also known as: MFA, 2FA, two-factor authentication

Definition

Multi-factor authentication (MFA) requires two or more kinds of proof to sign in, such as a password plus an app prompt, security key or biometric unlock of a passkey.

Why it matters

MFA blocks most attacks based on stolen passwords. Phishing-resistant methods (FIDO2 security keys and passkeys) are strongest; authenticator apps are good; SMS codes are the weakest common option but still better than a password alone.

Common questions about multi-factor authentication

Sources