# Multi-Factor Authentication
Account protection that requires more than one kind of proof of identity.
Canonical page: https://givegigs.com/wiki/multi-factor-authentication
Last updated: 2026-11-09T19:00:07.118Z
Parent topic: [information-and-digital-life](https://givegigs.com/wiki/information-and-digital-life)
## Contents
- [Overview](#wiki-section-overview-1)
- [Choose and enable a method](#wiki-section-choose-and-enable-2)
- [Protect account recovery](#wiki-section-recovery-3)
## Overview
Multi-factor authentication (MFA) asks a person to prove identity using more than one category of factor, such as something they know, possess, or are. Two passwords are still one factor category. MFA can reduce the damage from a stolen password, though some methods are more resistant to phishing than others.
Explore related topics:
- [password-security](https://givegigs.com/wiki/password-security)
- [cybersecurity](https://givegigs.com/wiki/cybersecurity)
- [privacy](https://givegigs.com/wiki/privacy)
## Choose and enable a method
Prefer phishing-resistant authentication such as passkeys or security keys when a service supports them. Authenticator apps are generally safer than codes delivered by text, while any additional factor is often better than password-only access. Set up more than one secure recovery option and store backup codes somewhere protected.
## Protect account recovery
Attackers may target account recovery, support staff, or a phone number instead of the MFA prompt. Review recovery email and phone settings, use a device lock, and never approve an unexpected sign-in request. If a factor is lost or compromised, use the service's official recovery process and secure other accounts that depend on it.
## Sources
- [CISA: Use Multi-Factor Authentication](https://www.cisa.gov/secure-our-world/use-mfa)
---
This article is collaboratively maintained. Check the canonical page and cited sources for the latest context.