Multifactor authentication
Names and abbreviations on this page
CISA — Cybersecurity and Infrastructure Security Agency. A United States agency providing cybersecurity and infrastructure-security guidance.
Technology terms & practical skills
What it means
Multifactor authentication, often shortened to MFA, uses more than one kind of evidence to sign in, such as a password and a security key. Two passwords are still the same kind of factor. Available methods vary by service.
Related skills
Set up protectionEnable a supported additional sign-in factor.
Prepare recoveryStore recovery codes somewhere protected and accessible to you.
Recognize promptsReject unexpected approval requests and investigate through the service directly.
An everyday example
After enabling a second sign-in factor on a practice account, review how you would regain access if your phone were lost. Check the recovery process before you need it.
What to check
Never approve a prompt just because it repeats. Avoid giving a caller a one-time sign-in code, even if they claim to be support.