# Multi-Factor Authentication (MFA)

A login method that requires two or more independent proofs of identity, such as a password plus a one-time code.

**Multi-factor authentication[↗](/authentication) (MFA)** is a login method that requires two or more independent pieces of evidence to confirm someone's identity, typically combining something you know (a password), something you have (a phone or security key[↗](/security-key)), and sometimes something you are (a fingerprint or face scan). Even if an attacker steals your password, MFA means they still can't get into your account without also having your second factor.

MFA is one of the single most effective security measures an individual or organization can adopt, since the vast majority of account takeovers rely on a stolen or guessed password being the only barrier. Common forms include one-time codes from an authenticator app, push notifications to a trusted device, and physical security keys, all of which are significantly stronger than SMS text codes, which can be intercepted through SIM-swapping attacks.