FIRST CHECKEnter your password
Something you know
PART 3
MULTI-FACTOR AUTHENTICATION · What MFA means01 / 4
FROM A STRONG PASSWORD TO MFA
A strong password can still leak.
Add another check.
MFA means Multi-Factor Authentication. Multi means more than one. A factor is a way to prove it is really you.
Most MFA starts with two checks.1. Your password + 2. A one-time code
Watch: What is Two-Factor Authentication? ↗↓
SECOND CHECKGet a one-time code
Text, email or authenticator app
↓
FINISHEnter the code
The account lets you in
2FATwo-Factor Authentication = two checks
WHY MFA HELPS
They have your password.
They still need your code.
The code is usually sent to your phone, email or authenticator app. Without the code, the login stops.
Can they log in with only the password?
OTHER PERSON✓ Your password✕ No code
ACCOUNTLOCKED×
YOU✓ Your password✓ Your one-time code
ACCOUNTOPEN✓
A code protects you only if you keep it private.
MORE CHECKS
Some important accounts use
three or more checks.
Banking and other high-risk services may ask for extra proof before opening the account.
If one check is lost, another check can still stop the login.The exact checks depend on the service.
TWO CHECKSPassword + one-time code
Code from text, email or an authenticator app
THREE CHECKSPassword + code + fingerprint
Face recognition can also be used
FOUR CHECKSPassword + email code + phone approval + fingerprint
An example for a high-risk account
✓MORE INDEPENDENT CHECKS= MORE PROTECTION
THE FINAL PLAN
Build a safer account
with two layers.
Start with a strong password. Then turn on MFA to add another check. If the password leaks, the extra check can still stop the login.
What are the two layers?
FIRST LAYERStrong passwordLong · hard to guess · private
+
EXTRA CHECKMFACode · phone · fingerprint
=
✓SAFER
ACCOUNT
ACCOUNT
Strong password+Extra check (MFA)=Safer account