Skip to main content

Security glossary

Multi-factor authentication

An account control that requires evidence from more than one authentication factor, such as a password plus a security key or authenticator.

Example

A website administrator signs in with a unique password and confirms the attempt using a registered security key.

Why it matters

MFA can reduce the chance that a stolen password alone leads to account access, although phishing-resistant methods and recovery controls still matter.

Related terms