Two-Factor Authentication
2FA
ELI5 — The Vibe Check
2FA means you need two things to log in: something you know (password) and something you have (your phone). Even if a hacker steals your password, they can't log in without your phone. It's the security equivalent of needing both a key and a fingerprint to open a door.
Real Talk
Two-Factor Authentication (2FA) requires users to provide two distinct authentication factors: typically knowledge (password), possession (authenticator app, hardware key), or inherence (biometric). It dramatically reduces account takeover risk even when passwords are compromised.
When You'll Hear This
"Enable 2FA on all admin accounts immediately." / "The attacker had the password but was blocked by 2FA."
Related Terms
Authentication (AuthN)
Authentication is proving you are who you say you are.
Biometric
Biometric authentication uses your body as your password — fingerprint, face, iris scan.
MFA (MFA)
MFA stands for Multi-Factor Authentication. It's the umbrella term for requiring multiple proofs of identity. 2FA is MFA with exactly two factors.
Password Manager
A password manager remembers all your passwords so you don't have to reuse the same one everywhere.
Phishing
Phishing is when hackers pretend to be someone you trust — your bank, your boss, Google — to trick you into giving up your password or clicking a bad link.
TOTP (TOTP)
TOTP (Time-based One-Time Password) is the 6-digit code that changes every 30 seconds in apps like Google Authenticator.