Multi-Factor Authentication

Choose Multi-Factor Authentication by Threat Model

Multi-factor authentication (MFA) reduces the damage caused by stolen passwords, but not every second factor provides the same protection. A one-time code, a push approval, and a hardware-backed credential all add another authentication step, yet they behave differently under phishing, malware, social engineering, and account recovery attacks. The useful question is therefore not simply whether MFA is enabled. It is whether the authentication method resists the threats that matter for the account being protected.