Multi-Factor Authentication (MFA)

Multi-Factor Authentication requires users to provide two or more verification factors, significantly reducing the risk of unauthorized access.

Types of MFA

• SMS OTP - One-time code via text message
• Authenticator apps - TOTP codes (Google Authenticator, Authy)
• Hardware tokens - YubiKey, FIDO2/WebAuthn
• Push notifications - Mobile app approval
• Biometrics - Fingerprint, face recognition

WebAuthn/FIDO2

WebAuthn is the modern standard for passwordless, phishing-resistant authentication using public-key cryptography and hardware authenticators.