What Is Multi-Factor Authentication (MFA)?
Table of Contents
What Is Multi-Factor Authentication?
Multi-Factor Authentication (MFA) is a login security method that requires a user to verify their identity using two or more independent factors instead of just a password. Because passwords alone are frequently stolen, guessed or reused, MFA adds extra layers that are much harder for an attacker to obtain all at once.
The Types of Authentication Factors
The factors generally fall into three categories: something you know (a password or PIN), something you have (a phone receiving an OTP, an authenticator app, a hardware security key), and something you are (a fingerprint or face scan). MFA typically combines a password with one of the other two — even if a password is leaked in a data breach, the attacker still can't log in without the second factor.
Why MFA Matters for Businesses
For businesses, MFA is one of the highest-impact, lowest-cost security controls available — it blocks the vast majority of account takeover attempts that rely on stolen or guessed credentials, which is why it's a baseline requirement for cyber insurance underwriting and most compliance frameworks. Rolling it out across email, VPN access and admin accounts closes off one of the most common ways attackers get into a business's systems.