What is multi-factor authentication (MFA)?
D2 · Threats · CompTIA Security+ SY0-701MFA (Multi-Factor Authentication) requires a user to provide two or more verification factors from different categories before granting access.
The three factor types:
🔑 Something you know — password, PIN, security question
📱 Something you have — hardware token, authenticator app, smart card
👆 Something you are — fingerprint, retina scan, facial recognition
2FA = exactly two factors. MFA = two or more.
The three factor types:
🔑 Something you know — password, PIN, security question
📱 Something you have — hardware token, authenticator app, smart card
👆 Something you are — fingerprint, retina scan, facial recognition
2FA = exactly two factors. MFA = two or more.
Using two passwords is NOT MFA — they're both "something you know." MFA requires factors from different categories. SMS codes are MFA but considered weaker than authenticator apps (SIM swapping risk).