MFA
MFA
ELI5 — The Vibe Check
MFA stands for Multi-Factor Authentication. It's the umbrella term for requiring multiple proofs of identity. 2FA is MFA with exactly two factors. More factors = more secure. If something valuable is behind a login, MFA should be non-negotiable.
Real Talk
MFA is required by most modern security standards and compliance frameworks. Common implementations include TOTP authenticator apps, FIDO2/WebAuthn hardware keys, push notifications, and biometrics. Adaptive MFA adds risk-based triggers (new device, unusual location).
When You'll Hear This
"All cloud console access must use MFA per our security policy." / "Hardware MFA keys are phishing-resistant; TOTP is not."
Related Terms
2FA (2FA)
2FA is short for Two-Factor Authentication. Two locks instead of one. Password plus a code from your phone (or a hardware key).
Authentication (AuthN)
Authentication is proving you are who you say you are.
Biometric
Biometric authentication uses your body as your password — fingerprint, face, iris scan.
Compliance
Compliance means following the rules — legal, industry, or governmental standards that say how you must handle data and security.
Multi-Factor Authentication (MFA)
MFA is like 2FA but can use more than two factors. Three locks instead of two.
TOTP (TOTP)
TOTP (Time-based One-Time Password) is the 6-digit code that changes every 30 seconds in apps like Google Authenticator.