What is MFA and why is it more secure than single-factor authentication?

What is MFA and why is it more secure than single-factor authentication?

• A. MFA uses only one factor.
• B. MFA is less secure than single-factor authentication.
• C. MFA requires at least two factors (knowledge, possession, or inherence); reduces credential theft risk.
• D. MFA is just a stronger password.

Answer: (C)

MFA means you must provide at least two independent pieces of evidence to verify your identity. These factors come from three categories: something you know (a password), something you have (a hardware token or your phone), and something you are (a biometric like a fingerprint). Because two separate factors are required, simply stealing a password isn’t enough to get in. Even if an attacker obtains your password, they’d still need the second factor to sign in, which greatly reduces the risk of credential theft compared with using a single factor. Real-world examples include entering a password and a code from an authenticator app, approving a push notification on your device, or using a hardware security key. While no system is perfect, MFA makes it much harder for attackers to gain access and provides a meaningful boost in security over relying on one factor alone.

MFA means you must provide at least two independent pieces of evidence to verify your identity. These factors come from three categories: something you know (a password), something you have (a hardware token or your phone), and something you are (a biometric like a fingerprint). Because two separate factors are required, simply stealing a password isn’t enough to get in. Even if an attacker obtains your password, they’d still need the second factor to sign in, which greatly reduces the risk of credential theft compared with using a single factor.

Real-world examples include entering a password and a code from an authenticator app, approving a push notification on your device, or using a hardware security key. While no system is perfect, MFA makes it much harder for attackers to gain access and provides a meaningful boost in security over relying on one factor alone.