Security method requiring two or more verification factors to prove identity.
Multi-Factor Authentication (MFA) requires users to provide two or more verification factors from different categories: something you know (password), something you have (phone, token), or something you are (fingerprint, face). MFA dramatically improves security because attackers must compromise multiple factors. Even if passwords are stolen through phishing or breaches, MFA blocks access without the additional factor. MFA is one of the most effective security controls available.
Why It Matters
The DSC Perspective:
MFA blocks the vast majority of account takeover attacks. It's essential for all accounts, especially those with access to sensitive systems. If you implement one security improvement, make it MFA everywhere.