What is multi-factor authentication (MFA)?
Options
- Using two different passwords for the same account
- Two or more proofs: something you know, have or are (Correct option)
- Logging in on two different devices at the same time
- Using a much longer and more complex password
Answer
Requiring two or more different kinds of proof: something you know (password), have (phone, key) or are (fingerprint)
Why
Passwords leak, get guessed or phished. MFA adds another factor of a DIFFERENT type, e.g. a code from an authenticator app or a hardware security key.
An attacker with only your password still cannot log in.
Two passwords are not MFA: both are 'something you know'.
Remember
MFA = password + something you have or are.