What is MFA?
MFA stands for multi-factor authentication.
It means using more than one kind of proof when logging in.
The three common factor types
Authentication factors usually fall into three groups:
- something you know, like a password
- something you have, like an authenticator app or security key
- something you are, like a fingerprint or face scan
Why MFA matters
If an attacker steals a password, MFA can make it harder for them to log in.
MFA is not magic, and some forms are stronger than others, but it is one of the most important basic defenses for accounts.
Examples
Stronger options:
- passkeys
- hardware security keys
- authenticator apps
Weaker options:
- SMS codes, especially if the account is high value