Multi-Factor Authentication
MFA
ELI5 — The Vibe Check
MFA is like 2FA but can use more than two factors. Three locks instead of two. Something you know (password), something you have (phone), and something you are (fingerprint). The more factors, the harder to hack. Banks and enterprise apps love MFA.
Real Talk
MFA (Multi-Factor Authentication) requires two or more verification factors drawn from: knowledge (password, PIN), possession (authenticator app, hardware key), inherence (biometric), location, or time-based. It's mandated by many compliance frameworks (SOC 2, PCI DSS, HIPAA).
When You'll Hear This
"SOC 2 compliance requires MFA for all employees." / "After enabling MFA, account takeovers dropped to zero."
Related Terms
2FA (2FA)
2FA is short for Two-Factor Authentication. Two locks instead of one. Password plus a code from your phone (or a hardware key).
Authentication (AuthN)
Authentication is proving you are who you say you are.
Biometric
Biometric authentication uses your body as your password — fingerprint, face, iris scan.
Compliance
Compliance means following the rules — legal, industry, or governmental standards that say how you must handle data and security.
TOTP (TOTP)
TOTP (Time-based One-Time Password) is the 6-digit code that changes every 30 seconds in apps like Google Authenticator.
Two-Factor Authentication (2FA)
2FA means you need two things to log in: something you know (password) and something you have (your phone).