Multi-Factor Authentication
Explore TOTP, hardware keys, push notifications, and why MFA dramatically reduces account takeover risk.
What is MFA?
Multi-Factor Authentication (MFA) requires users to prove identity with two or more independent factors from different categories. Even if one factor is compromised (e.g., stolen password), the account remains protected.
The Three Factor Categories
Authentication factors:
- Something you know — password, PIN, security question
- Something you have — phone, hardware token, smart card
- Something you are — fingerprint, face, voice (biometrics)
True MFA uses at least two different categories — not two passwords.