Cybersecurity / Glossary

Multi-factor authentication (MFA)

Multi-factor authentication (MFA) asks for a second proof of identity, such as an app code, a push approval or a security key, on top of your password.

With MFA, a stolen password alone is no longer enough to get into your account. Two-factor authentication (2FA) is the most common form.

Factors differ in strength: SMS codes can be intercepted, app codes and push prompts are better, and passkeys and security keys resist phishing best.

Turn on MFA for email, banking and any account that matters. If you get a prompt you didn't start, deny it: someone knows your password.