Multi-Factor Authentication
Account protection that requires more than one kind of proof of identity.
Multi-factor authentication (MFA) asks a person to prove identity using more than one category of factor, such as something they know, possess, or are. Two passwords are still one factor category. MFA can reduce the damage from a stolen password, though some methods are more resistant to phishing than others.
Prefer phishing-resistant authentication such as passkeys or security keys when a service supports them. Authenticator apps are generally safer than codes delivered by text, while any additional factor is often better than password-only access. Set up more than one secure recovery option and store backup codes somewhere protected.
Attackers may target account recovery, support staff, or a phone number instead of the MFA prompt. Review recovery email and phone settings, use a device lock, and never approve an unexpected sign-in request. If a factor is lost or compromised, use the service's official recovery process and secure other accounts that depend on it.
Take this topic further
Turn “Multi-Factor Authentication” into a learning path
The Learning Studio will use this page’s overview and key ideas to shape a guided lesson, practice questions, and a small project around what you want to understand.
Related GiveGigs pages and features
Explore connected GiveGigs pages and tools for context and next steps.