MFAs system of electronic verification of an identity that requires two or more pieces of evidence. The most common implementation of MFA involves providing an SMS, email, or app-based time-limited code and a password. The goal of MFA is to provide an extra layer of security, preventing unauthorized access to sensitive information.
Common types of factors include:
- Something the user knows, such as a password, or PIN
- Something the user has, such as a security token, or key fob
- Biometrics, such as fingerprint or facial recognition
MFAs system of electronic verification of an identity that requires two or more pieces of evidence. The most common implementation of MFA involves providing an SMS, email, or app-based time-limited code and a password.
One of the strongest forms of MFA involves using a physical object that is in the user’s possession. For example, a USB stick, a credit card, a key, or a cell phone. MFA may also involve security questions to which only the user should know the answers. In some cases, biometrics, such as a fingerprint or retinal scan, may also be used.