Multi-factor authentication (MFA)
- Term
- Multi-factor authentication (MFA)
- Exam
- CISA & CISM
- Definition
Authentication using two or more of: something you know, have or are.
- Explained
MFA combines two or more factors: something you know, have or are. Phishing-resistant methods such as hardware security keys resist relay and fatigue attacks that defeat SMS codes and simple push approvals.
- In practice
A password plus a hardware security key.
- Often confused with
- Two passwords (still one factor)
- Exam angle
Phishing-resistant methods such as hardware keys are strongest.
- Related