What Is MFA?
Multi-factor authentication (MFA) is a security method designed to strengthen identity verification. Access to an account or system is granted only after the user has successfully authenticated using multiple identification factors.
The idea behind MFA is that proving one’s identity solely through knowledge of a password or PIN is too weak to ensure trustworthy authentication. By combining two or more identification factors, it becomes more difficult for attackers to gain unauthorized access.
Possible identification factors include:
- Knowledge: Something only the user knows, such as a password or a security question to which only they know the answer.
- Possession: Something only the user possesses, such as a smartphone, an authentication app, a smart card or a USB security key.
- Biometrics: Something the user is, such as their fingerprint, facial features or iris.
Most MFA solutions use a combination of at least two of the identification factors listed above to verify that the user really is who they claim to be. For example, when signing in to a system, a user might be asked to enter a password and a one-time code sent to their smartphone via SMS. In this case, the password represents the knowledge factor, while the SMS code represents the possession factor.
MFA is increasingly being used to secure online accounts, cloud services and corporate networks. By implementing MFA, organizations can improve their security posture and prevent attackers from gaining access to accounts through a successful phishing attack or other methods.