Multi-Factor Authentication
Multi-factor authentication requires at least two independent factors from different categories to verify identity.
- Acronym
- MFA2FA
- Synonym
- MFATwo-Factor Authentication2FA
Definition
Multi-factor authentication is an authentication process that requires at least two independent factors from different categories, typically combining something the user knows with something the user has or is. MFA raises the attacker's cost by requiring compromise of multiple forms of evidence. However, the actual security level of MFA varies greatly depending on factor choice, enrollment quality, phishing resistance, recovery process, and protocol implementation.
Why it matters
MFA is one of the most effective baseline controls against account takeover in enterprise IAM.
The Ariovis perspective
Authentication strength should match the risk of the journey rather than impose the same friction everywhere. Ariovis looks for a balance between security, maintainability and user experience.
Related services
Common pitfalls
- A common issue is deploying MFA while leaving fallback, recovery, or exception processes weak enough to bypass the intended protection.
Standards and protocols
- NIST SP 800-63B
- PCI DSS v4.0
- FIDO2/WebAuthn
- TOTP (RFC 6238)
- HOTP (RFC 4226)
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.