Multi-factor authentication requires two or more proofs of identity to log in, such as a password plus a code or a security key.
1. Key points
- MFA makes stolen passwords much less useful to attackers.
- Authenticator apps and security keys are generally stronger than SMS codes.
- Never share MFA codes with anyone who contacts you.
- Save backup codes somewhere safe.
2. Where to turn it on first
Email, banking, and the accounts that can reset others (like your Apple, Google or Microsoft account).
See also
- Phishing — Phishing is a scam where criminals send emails, texts or messages pretending to be a trus…
References
- official Turn On MFA — Cybersecurity and Infrastructure Security Agency
- official Use Strong Passwords — Cybersecurity and Infrastructure Security Agency
A cited source does not by itself make every claim verified.
Answers that cite this article
