The ABC's of Multi-Factor Authentication

Font Size: + -

Feedback Print

Learn the best way to protect yourself online

What is multi-factor authentication?

Multi-factor authentication (MFA) is a security technology that requires multiple methods of authentication to verify a user's identity for a login or other transaction.

It is more than a single authentication like password protection. It is a combination of two or more verification factors to gain access to a resource, such as email, application, or online account, to name a few.

Two-factor authentication (2FA) requires users to present two types of authentications, while MFA requires users to present at least two, if not more types of authentications. A key goal for MFA is to add additional authentication factors to increase security.

Most MFA authentication methodology is based on one of three types of additional information:

Things you know (knowledge), such as a password or PIN
Things you have (possession), such as a badge or smartphone
Things you are (inherence), such as a biometric like fingerprints or voice recognition

Example:

When you log into a domain, such as Office365 with your username and password, (Username: me@domain.com ; Password: password123) what multi-factor authentication adds is another method of authentication or 2^nd factor.

When MFA is enabled for such domains as Office365, when you login the “something you know” which is your username and password, you will then be contacted on the “something you have” (mobile phone).

You can be contacted via voice, text, or by an app on your phone. If you use voice, a phone call will occur, so you can identify who you are. If you use the form of text, you will receive a text message that you will need to use a code to complete your authentication. If you use an MFA application on your mobile phone, you will complete the authentication with a prompt on the installed app.

Another method of MFA is “something you are”. This method will include a biometric scanning by using a fingerprint, retina, or full facial scanning.

Please view some of the videos below to better understand what MFA is.

FAQ Box

What are the 3 factors in MFA?
Three Main Types of MFA Authentication Methods
Things you know (knowledge), such as a password or PIN.

Things you have (possession), such as a badge or smartphone.

Things you are (inherence), such as a biometric like fingerprints or voice recognition.
What are the challenges with multi-factor authentication?

One of the first challenges an organization can face when implementing multi-factor authentication is getting people to use it in the first place. 68% of people do not use MFA everywhere that it is available. Unfortunately, many users see the added security step as an inconvenience that they will avoid if possible.

Implementing an effective MFA system helps your business maintain compliance with data protection regulations and reduce your legal liability if a user’s account is compromised.

Multi-factor authentication, like any other security system, is not infallible. It does make life significantly harder for a potential attacker, making your organization and your users a less attractive target for fraud and data theft. It is vital to implement multi-factor authentication in a convenient way for your users, however, as it cannot protect their accounts if they do not want to use it.
What is Multi-Factor Authentication (MFA)?

Multi-Factor Authentication (MFA) refers to an additional layer of security that is added to the login process.

MFA relies on two forms of authentication: something you know, and something you have with you. The something you know is your password. The something you have with you can be a mobile device or hardware token. This means that even if your password is hacked, your account will remain secure.

More FAQs