CyberGuard dictionary / Identity & Access
Multifactor Authentication
Also known as MFA
Authentication using at least two different kinds of factors.
In simple terms
MFA asks for more than just a password, such as a security key or authenticator approval.
Technical explanation
Factors typically involve something known, possessed, or inherent; two passwords are not two different factor types.
Factors should be independent, and resistance to phishing varies by method. Hardware-backed passkeys or security keys bind authentication to the intended site more strongly than a code that a user can be tricked into relaying.
Examples in practice
An administrator signs in with a password and a hardware security key.
An attacker has the administrator's password and asks for a one-time code over the phone. A site-bound security key refuses to complete authentication on the attacker's lookalike page.
Why it matters
A stolen password alone is less useful when a separate factor is required.
VERIFY & LEARN MORE
Sources and further reading
Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.