What is Multi-Factor Authentication (MFA)?

Multi-factor authentication (MFA) is a technology where the user is asked to provide two or more factors to access a resource.

At the same time, using a VPN, online account, or application. A robust identity and access management (IAM) policy must implement MFA. MFA reduces the likelihood of a successful cyberattack by requiring one or more additional verification elements beyond the username and password.

How Does MFA Operate?

In order for MFA to function, more verification data (factors) are needed. One-time passwords (OTP) are among the MFA factors that consumers encounter most frequently. OTPs are the four to eight-digit codes that you frequently get over SMS, email, or mobile apps. Every time an authentication request is made, or regularly, a new code is created using OTPs. The code is formed using a seed value that is given to the user at the time of registration and another factor, which could be as simple as a time value or an incremented counter.