Glossary · M
MFA
Multi-factor authentication requires a user to present two or more independent proofs of identity, such as a password and a code from a device, before access is granted.
Extended definition
In more detail.
MFA stops attackers who have only a password, which is why insurers, customers and frameworks treat it as a baseline for remote access, email and privileged accounts. Conventional methods such as codes and push notifications can be defeated by real-time phishing and push fatigue; phishing-resistant methods such as security keys and passkeys cannot be relayed. MFA on all remote access, all email and all privileged accounts is the usual insurer expectation.
In our work
Where it appears.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days