Glossary · Cybersecurity

What is Multi-Factor Authentication (MFA)?

Logging in with two or more different kinds of proof: something you know, have or are.

In more detail

Blocks most account takeovers from stolen passwords. Passkeys and hardware keys are the strongest; SMS OTP is the weakest but still better than nothing.

Example

Password plus a code from an authenticator app.

Learn it properlyPasswords, Hashing, MFA and Passkeys: Getting Authentication Right11 min lesson · Cybersecurity

Related terms

Full glossary

CIA TriadThe three core goals of information security: confidentiality, integrity and availability.Cross-Site Scripting (XSS)An attack where untrusted input is shown on a page without encoding, so an attacker’s script runs in other users’ browsers.Password HashingStoring a one-way, salted, deliberately slow transformation of a password instead of the password itself.PhishingA fraudulent message pretending to come from a trusted source to steal credentials, money or access.SQL InjectionAn attack where input changes the meaning of a database query because it was inserted directly into the SQL text.Zero TrustA security model that never grants trust based on network location and verifies every user, device and request.