Back to Glossary
Defense

MFA (Multi-Factor Authentication)

Security method requiring multiple ways to verify identity

MFA (Multi-Factor Authentication) is an authentication method that requires users to provide two or more factors to verify their identity. Significantly increases security compared to a password alone.

Authentication Factors

What you know (Knowledge)

  • Password
  • PIN code
  • Security question

What you have (Possession)

  • Smartphone (TOTP app)
  • Hardware token (YubiKey)
  • SMS code

Who you are (Inherence)

  • Fingerprint
  • Face recognition
  • Voice

Types of MFA

  • 2FA — two-factor authentication
  • TOTP — Time-based One-Time Password
  • FIDO2/WebAuthn — hardware keys
  • Push notifications — app confirmation

Why It Matters

  • 99.9% of attacks blocked by MFA (Microsoft)
  • Protection from phishing
  • Compliance (PCI DSS, GDPR)

Category

WAF, SIEM, SOC, EDR, protection and monitoring tools