authentication

Multi-Factor Authentication (MFA)

A security mechanism requiring two or more independent forms of verification to confirm identity. Factors include something you know (password), something you have (phone or token), and something you are (biometrics).

Extended Explanation

MFA significantly reduces the risk of unauthorized access even if passwords are compromised. Studies show that MFA can prevent over 99% of automated credential attacks. Common MFA methods include authenticator apps, hardware security keys, SMS codes, and biometric verification. Organizations should prioritize phishing-resistant MFA methods like FIDO2 security keys.