What is multi-factor authentication (MFA)?

Multi-factor Authentication (MFA) is a security mechanism that requires an individual to provide two or more verification factors to gain access to a resource, such as an application, online account, or a VPN. Instead of just asking for a username and password, MFA requires one or more additional verification factors, which decreases the likelihood of a successful cyber attack.

The factors in MFA are typically categorized into something you know (like a password or PIN), something you have (like a smartphone or a security token), and something you are (like a fingerprint or other biometric verification). By combining these different categories of information, MFA enhances security because even if an attacker obtains one factor, such as the password, they would still need to bypass the additional factor(s) to gain unauthorized access.

MFA is widely regarded as a best practice in digital security and is increasingly becoming a standard feature in many services, especially those handling sensitive or personal data. It’s employed in various sectors including banking, healthcare, and education, to add an extra layer of security to protect against unauthorized access and potential breaches.