Multi-Factor Authentication
MFA
Simple Explanation
Multi-factor authentication, or MFA, is an extra security measure that helps protect your online accounts. Imagine your front door has both a key and a separate security code. Someone who steals your key may still be unable to enter because they don't know the code. MFA works in a similar way. When signing in to an account, you may need to enter your password and then complete another check, such as approving a request on your phone or using your fingerprint. This makes it harder for someone to access your account using a stolen password.
Technical Explanation
Multi-factor authentication is a security method that requires two or more different types of evidence to verify someone's identity. These can include something a person knows, such as a password; something they have, such as a registered security key; or something they are, such as a fingerprint. Using different types of verification provides stronger protection than relying on a password alone.
Business Use Case
A company stores sensitive customer records, employee details and financial information in its computer systems. To protect this information, the company requires employees to use MFA when signing in. Along with their password, employees must complete another security check, such as approving a notification on a registered device. If a criminal steals an employee's password, this additional check can prevent unauthorized access. This helps reduce the risk of data theft, financial fraud and costly security incidents.
Real-Life Example
Imagine Robert uses online banking to pay his household bills. One day, a criminal obtains his banking password through a fake email. The criminal tries to sign in, but the bank also requires approval from Robert's registered phone. Because the criminal doesn't have that phone, the attempted sign-in is blocked. Robert receives an unexpected approval request, realizes something is wrong and contacts his bank. MFA provides an important extra layer of protection, although it doesn't prevent every type of online fraud.
Enter your password, something you know, then approve on your phone, something you have. Both checks must succeed.
Result: Both checks must succeed.