Multifactor Authentication
Multifactor authentication (MFA or 2FA) is a security measure that requires the user to provide two or more forms of identification in order to access a resource, an account or system. MFA adds an additional[1] layer of security beyond a password, making it more difficult for an attacker to gain unauthorized access.
Factors
There are three "factors," or types of identification
- Something you know
- This is typically a password, passphrase, or a PIN. It could also be a secret process or method known only to select individuals.
- Something you have
- This is something you can prove you posses, such as a hardware security key, an encryption certificate, a TOTP seed, or in some cases, a phone number.
- Something you are
- This is a physical characteristic of you. This could be a face scan, fingerprint, iris scan, or another biometric.
Examples of MFA include:
- Something you know (e.g. password) and something you have (e.g. a security token or smartphone)
- Something you know (e.g. password) and something you are (e.g. a fingerprint or facial recognition)
- Something you have (e.g. a security token) and something you are (e.g. a fingerprint or facial recognition)
- A one-time code sent via text message or email and a password
- A biometric authentication such as a fingerprint scan or facial recognition combined with a password.
These examples use a minimum of 2 factors of authentication to validate the identity of the user, thus providing additional security and making it harder for the unauthorized person to gain access.
10 Advantages of 2FA/MFA
- Provides additional layer(s) of security beyond just a password.
- Reduces the risk of account takeover and unauthorized access.
- Helps prevent social engineering attacks.
- Can be used to verify the identity of the user.
- Can be used to authorize access to sensitive information or systems.
- Can be used to detect and prevent fraud.
- Can be used to comply with regulatory requirements.
- Can be used to improve incident response and forensic investigations.
- Increases user awareness of security risks.
- Can be integrated with other security technologies, such as biometrics and encryption[2]
Methods
Users must not only keep private their passwords and ID factors, but also keep private which methods are used by which systems. In commercial MFA systems, administrators and users can manage these methods[3].
See also
References
- ↑ "What is Multi-Factor Authentication (MFA) and How Does it Work?", https://www.onelogin.com/learn/what-is-mfa
- ↑ https://expertinsights.com/identity-and-access-management/what-are-the-3-types-of-multi-factor-authentication
- ↑ "Administrators can manage these methods ..", https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userdevicesettings