Skip to content
English
Incident Support Customer Portal
Contact Us
  • There are no suggestions because the search field is empty.

What is Multi Factor Authentication (MFA)?

Multi-Factor Authentication (MFA) is a security measure that requires users to verify their identity using two or more authentication factors before granting access to an account, application, or system.

MFA significantly enhances security by making it harder for cyber criminals to gain access, even if they steal a user's password.

🔹 How Does MFA Work?

MFA requires users to provide at least two of the following three authentication factors:

1️⃣ Something You Know – A password, PIN, or security question.
2️⃣ Something You Have – A mobile phone, security token, smart card, or authentication app.
3️⃣ Something You Are – Biometric verification such as fingerprint, facial recognition, or retina scan.

🚀 Example: When logging into a work account, you might enter your password (Something You Know) and then approve a notification on your phone (Something You Have).

🔹 Why is MFA Important?

✔️ Protects Against Phishing & Credential Theft – Even if hackers steal your password, they cannot access your account without the second factor.
✔️ Reduces the Risk of Unauthorized Access – Adds an extra layer of protection for sensitive data and systems.
✔️ Required for Compliance – Many regulations (e.g., GDPR, HIPAA, PCI DSS) mandate MFA for securing sensitive information.
✔️ Mitigates Password Weaknesses – Most people use weak or reused passwords; MFA reduces reliance on passwords alone.

🔹 Types of MFA Methods

✅ Authenticator Apps – Microsoft Authenticator, Google Authenticator, Authy (generates one-time codes).
✅ Push Notifications – Approve login requests via apps like Duo Security or Microsoft Authenticator.
✅ SMS or Email Codes – A one-time password (OTP) is sent via SMS or email.
✅ Biometric Authentication – Fingerprint, facial recognition, retina scans.
✅ Hardware Security Keys – Physical USB keys like YubiKey, Google Titan Key.

🔹 MFA vs. 2FA (Two-Factor Authentication)

  • 2FA = Two authentication factors (e.g., password + SMS code).
  • MFA = Two or more factors (e.g., password + authenticator app + fingerprint).

🔹 Best Practices for Implementing MFA

🔹 Use Strong Authentication Methods – Avoid SMS-only MFA; use authenticator apps or security keys.
🔹 Enable MFA for Critical Accounts – Admin accounts, email, banking, cloud services, VPNs.
🔹 Educate Employees & Users – Ensure users understand how MFA protects their accounts.
🔹 Monitor MFA Logs – Track login attempts and potential fraud indicators.